Sr. Director, Security

Responsibilities

• Set and deliver the security strategy for an AI-native SaaS platform
• Lead teams across Application Security (Product Security), Infrastructure Security, Detection & Response, and GRC
• Partner with executives, Enterprise Governance, GTM, Product, Engineering, Legal, and Risk to make security a competitive advantage
• Shape product security posture for enterprise customers and AI features
• Drive change management across the company: policies, golden paths, technical enforcement, procurement, and AI usage
• Partner with Enterprise Governance, Product, and GTM to design enterprise-grade security and trust controls
• Run a real risk program: identify, quantify, prioritize, communicate, and drive down risk across the company
• Lead detection, response, and incident management programs end-to-end, including product security incident response and bug bounty
• Manage diverse, high-performing engineering organizations; coach managers, tech leads, and senior ICs
• Develop and deliver a multi-year security vision, strategy, and roadmap aligned with company and AI strategy
• Build partnerships across Product, Engineering, Enterprise Governance, Legal, GTM, Finance, People, and Risk
• Communicate clearly to engineers, executives, Board members, customers, CISOs, auditors, regulators, and analysts

Requirements

• Pragmatic, engineering-oriented SaaS security leader with experience leading security teams for SaaS product companies on modern tech stacks
• Deep expertise in at least one security discipline (Application/Product Security, Infrastructure Security, Detection & Response) and broad across others
• Fluency in modern cloud and identity threat models, supply chain risk, and secure-by-default infrastructure
• Experience operating in ambiguity with hypothesis-driven, systems-thinking approach
• Strong change management skills: influencing executives and shifting company practices without defaulting to "security said no"
• Executive presence internally and externally; comfortable with customers, prospects, CISOs, auditors, regulators, and analysts
• Deep expertise in detection, response, and incident management, including running bug bounty programs at scale
• Experience managing diverse, high-performing, growth-mindset engineering organizations and managing managers
• Ability to develop and deliver aligned security vision, strategy, and roadmap with measurable outcomes
• Excellent written and verbal communication skills; able to tailor messaging from engineer to Board member

Nice-to-Haves

• Experience securing agentic systems, MCP-style integrations, and AI features that touch customer data
• Prior path toward or interest in Chief Security Officer role