Senior Director, Product Security

Role overview

The Senior Director of Product Security sets the strategy for embedding security throughout a cloud-native SaaS platform. Reporting to the Chief Security Officer in a hybrid Poland-based role, this leader drives Secure-by-Design principles, threat modeling, and architecture reviews across the software development lifecycle while partnering closely with Engineering, Product, and Infrastructure teams. The position suits a seasoned security executive who thrives in a fast-paced, innovation-focused environment and can balance hands-on technical depth with cross-functional leadership.

Responsibilities

- Define and mature the end-to-end application security program across SaaS products and services - Expand automated test coverage of repositories, microservices, and endpoints through SAST, DAST, SCA, and container scanning - Operate and refine security gates within CI/CD pipelines, measuring deployment-blocking policy violations - Lead threat modeling, security architecture reviews, and Secure-by-Design initiatives across product teams - Drive organization-wide vulnerability management and product risk remediation programs - Build, mentor, and manage a globally distributed team of product security engineers

Requirements

- 15+ years across software engineering, security engineering, application security, or product security, including 8+ years leading security organizations - Proven track record building or scaling product security programs within modern SaaS or cloud-native environments - Deep expertise in Secure SDLC, threat modeling, security architecture, application security, API security, and modern authentication and authorization frameworks - Strong understanding of cloud-native architectures, microservices, Kubernetes, containers, and multi-tenant SaaS platforms - Demonstrated ability to partner with Engineering and Product leadership to influence architecture and strategy - Excellent communication skills for conveying technical risk to executive leadership

Nice to have

- Experience securing AI or generative-AI-powered products and platforms - Hands-on software engineering background building distributed systems - Experience implementing security automation in modern CI/CD environments - Security certifications such as CISSP, CSSLP, or GIAC

Benefits and work setup

- Hybrid work arrangement based in Poland, with occasional travel (up to 10–25%) for team meetings or company events - Base salary range of PLN 31,000–34,000 per month, plus an annual bonus and equity program participation - Premium private medical care with priority appointments and partner coverage - Multisport Cards to support physical well-being - Flexible remote work options and one dedicated recharge long weekend per quarter