Director of Security

Location

This role will be located in our San Francisco Office, preferably.

About the Role

We are seeking a highly skilled and experienced Director of Security Engineering to lead and scale our security engineering efforts. In this role, you will define and drive the security vision, ensuring that our systems, infrastructure, and applications adhere to the highest security standards. You will partner with engineering, operations, and leadership teams to develop and execute a proactive security strategy that effectively balances business needs with risk mitigation.

As the Director of Security Engineering, you will lead a team of security engineers and security GRC analysts, fostering a culture of innovation, accountability, and technical excellence. Your expertise in product security, cloud security, security detections, incident response, and DevSecOps will be instrumental in shaping the organization's security landscape. You will play a critical role in protecting our systems and building a scalable, resilient security framework that supports our business growth.

What You'll Need

• A software-focused security background with a strong emphasis on DevSecOps and security engineering—prioritizing security controls and systems within the software development lifecycle over an IT/policy-centric approach.
• Strong leadership fundamentals—ability to have open, honest conversations and hold teams accountable both within Security Engineering and across the broader organization.
• A proven ability to set and drive strategy, direction, and vision, aligning security initiatives with business goals while fostering innovation and operational excellence.
• 10+ years of experience in Security Engineering, with at least 4+ years of management experience.
• Deep expertise in:
• AWS Security, Application Security, and IAM systems.
• Leading risk assessments and balancing security vs. usability.
• Security frameworks such as NIST CSF, ISO 27001, etc.
• Strong communication and interpersonal skills to effectively collaborate with cross-functional teams and leadership.

What You'll Do

• Define and execute the security engineering vision, strategy, and roadmap, ensuring security is embedded within the software development lifecycle and business operations.
• Lead, mentor, and scale a high-performing security engineering team, fostering a culture of collaboration and innovation.
• Collaborate cross-functionally with Software Engineering, Infrastructure, Operations, Legal, People, and DevOps teams to guide and implement security best practices.
• Design and implement scalable security solutions, including IAM, secure CI/CD pipelines, threat modeling, and cloud security architecture.
• Drive security automation initiatives to reduce risk, improve detection and response capabilities, and build a defensible infrastructure.
• Evaluate and implement cutting-edge security tools and technologies, ensuring the company remains ahead of emerging threats.
• Establish and enforce security policies, procedures, and standards, effectively balancing security requirements with business objectives.
• Act as a key advisor to leadership, providing insights into security risks, vulnerabilities, and mitigation strategies.

Compensation

Our compensation reflects the cost of labor across several  U.S. geographic markets, and we pay differently based on those defined markets. Base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The U.S. pay range for this position is $235,000-294,000 annually. Pay within this range varies by work location and may also depend on your qualifications, job-related knowledge, skills, and experience. Your recruiter can share more about the specific salary range for the job location during the hiring process. We also offer a comprehensive package of benefits including paid time off, 12 paid holidays per year, medical/dental/vision i