Director, Security Engineering

Role overview Lead the engineering practices and teams responsible for product, cloud, infrastructure, and AI security in a SaaS environment. The role sets standards and release controls, manages vulnerability response, and partners with engineering and governance leaders to address risk across products and services. It also includes hiring, team development, delivery planning, and budget oversight.

Responsibilities - Lead product security reviews, threat modeling, and security release gates in partnership with R&D teams; oversee standard launch approvals and penetration-test and bug-bounty intake. - Direct cloud and infrastructure security across identity and access management, cloud guardrails, infrastructure as code, patching, secrets, and privileged or automated access. - Set security requirements for AI features and services, addressing prompt injection, excessive agent permissions, data leakage, and risks through retrieval systems and connectors. - Establish risk review for third-party AI services and coordinate shadow AI concerns with governance partners. - Define security architecture and secure development standards, and oversee vulnerability tracking, remediation targets, exceptions, and escalations. - Hire and develop the team, support customer security reviews, deliver agreed engineering commitments, and track outcomes and spending.

Requirements - At least 10 years of security engineering experience, including 5 or more years leading security teams. - Experience leading both product and cloud security teams, with practical depth in cloud environments. - Working knowledge of AI and large language model security risks, including prompt injection, agent misuse, and data exposure. - Ability to influence senior engineering leaders on design choices and security trade-offs. - SaaS security experience; familiarity with regulated data environments is valuable.

Nice to have - Familiarity with established AI risk and application security frameworks. - Experience securing education records or other regulated data, including environments subject to FERPA or COPPA.

Benefits and work setup Work arrangements may be remote, hybrid, or office-based depending on role, team, and location. Listed benefits include an employee ownership program, paid time off and local holidays, wellness and mental health support, professional development resources, and tuition reimbursement. Benefits vary by location.