Senior Director, Security Engineering

Responsibilities

• Lead the end-to-end security engineering organization across product security, application security, identity and access management, vulnerability management, security architecture, software supply chain, AI/product-risk controls, and cloud infrastructure security.
• Define and execute a multi-year security engineering roadmap with measurable outcomes across product and infrastructure lifecycles.
• Own threat modeling, secure design reviews, developer security enablement, and integration of security into the software development lifecycle.
• Partner with engineering, product, infrastructure, legal, privacy, trust and safety, IT, audit, data, and strategic cloud partners such as AWS.
• Lead privacy engineering, including privacy-by-design systems, data inventory and classification, consent and preference controls, and data lifecycle and deletion.
• Drive adoption of IAM, secrets management, network security, container security, and other foundational security platforms and libraries.
• Own cloud security governance, including infrastructure-as-code security, AWS resource provisioning, CI/CD pipeline security, and security policies.
• Mature security compliance and accountability platforms, AAA standards, metrics, and automated vulnerability management.
• Serve as the CISO’s operating partner through executive communications, investment cases, and risk-reduction reporting.
• Establish unified roadmaps, service levels, prioritization, and success metrics across security and privacy engineering.
• Build and mentor a geographically distributed leadership organization and talent model.
• Shape security for AI-powered products and apply AI/ML to operational efficiency and threat response.

Requirements

• 15+ years of progressive security engineering experience, with a foundation in software engineering or security software engineering.
• Experience leading a multi-domain security engineering organization of 30+ engineers at a large B2C consumer internet platform.
• Deep expertise in product security, secure design, application security, vulnerability management, and developer enablement.
• Meaningful experience treating privacy engineering as a technical discipline, including privacy-by-design architectures and data lifecycle engineering.
• Experience managing large security budgets and multi-year security programs from strategy through execution.
• Experience managing geographically distributed teams and global stakeholders.
• Fluency in cloud security architecture, application and product security, IAM, privacy-preserving systems, and modern detection and response engineering.
• Ability to engage senior security software engineers on technical design, architecture decisions, and engineering trade-offs.
• Bachelor’s degree in Computer Science, Engineering, or a related field.

Preferred

• Experience with elevated consumer threat models, such as social platforms, marketplaces, or consumer fintech.
• AWS cloud security experience.
• Experience leading privacy engineering, AI security, and security software engineering organizations.