Sr. Director, Security Tools & Engineering

Company Overview

Docusign brings agreements to life. Over 1.5 million customers and more than a billion people in over 180 countries use Docusign solutions to accelerate the process of doing business and simplify people’s lives. With intelligent agreement management, Docusign unleashes business-critical data that is trapped inside of documents. Until now, these were disconnected from business systems of record, costing businesses time, money, and opportunity. Using Docusign’s Intelligent Agreement Management platform, companies can create, commit, and manage agreements with solutions created by the #1 company in e-signature and contract lifecycle management (CLM).

What you'll do

We are seeking a visionary leader to build and scale our Security Tools capability to centralize ownership, strategy, and lifecycle management of all security tooling under a single leader. This role will also oversee an engineering team responsible for driving automation, workflow modernization, and innovation across Product Security, Threat Modeling, Platform Security, and our Security Insights data platform.

 

The ideal candidate is an experienced security engineering leader who thrives in fast-paced, high-growth environments, understands modern security architectures, and knows how to turn fragmented toolsets into integrated, automated, intelligence-driven ecosystems.

 

This position is a people manage role reporting to the Vice President, Security Assurance.

 

Responsibility

• Develop and own the multi-year strategy for all security tools across Security

• Centralize tool selection, procurement, onboarding, maintenance, and vendor management under one unified program

• Rationalize overlapping tools and drive consolidation toward a cohesive, modern, automated security stack

• Establish measurable KPIs, SLIs, and ROI models to evaluate tool performance and effectiveness

• Own the insights layer of our security tooling ecosystem, including ITSM-driven attribution, tool-to-asset mapping, and measurement of coverage and efficacy across our controls

• Lead a high-performing engineering team responsible for building internal tools, integrating external tools into processes, automation, and integrations supporting Product Security, Threat Modeling, Platform Security, Vuln, Config and Exposure management

• Drive standardization and scale across security workflows (e.g., SDL and integration automation, Product Security, Platform Security and Exposure Management)

• Partner with Product amp; Platform Engineering to embed security-by-design capabilities into developer-facing tooling and CI/CD workflows

• Champion innovation by introducing modern technologies, including AI-assisted security automation and decision support systems for Security Assurance

• Partner with Product Security, Threat Modeling, Platform Security, SOC, IT, Architecture, and Developer Experience to ensure tooling and automation meet real-world needs

• Collaborate closely with the CISO and Security Leadership Team to shape strategy, report progress, and influence long-term planning

• Work with Finance and Procurement on vendor evaluations, budget planning, and cost optimization across the security tool ecosystem

• Recruit, mentor, and grow engineering talent across full-stack development, automation, and security data engineering

• Foster a culture of continuous improvement, experimentation, and engineering excellence

• Create structures that enable experimentation, rapid delivery, predictable execution, and high-quality outcomes

Job Designation

Hybrid: Employee divides their time between in-office and remote work. Access to an office location is required. (Frequency: Minimum 2 days per week; may vary by team but will be weekly in-office expectation)

 

Positions at Docusign are assigned a job designation of either In Office, Hybrid or Remote and are specific to the role/job. Preferred job designations are not guaranteed when changing positions within Docusign. Docusign reserves the right to change a position's job designation depending on business needs and as permitted by local law.

What you bring

Basic

• 15+ years in Engineering, Product, DevOps Security

• 5+ years leading technical teams

• Experience developing security tooling ecosystems and driving automation within large or scaled engineering organizations

• Experience with cloud security, SDL processes, threat modeling, vulnerability management, and CI/CD pipelines

• Experience working with data engineering teams, telemetry, or security analytics platforms