Director, Product Security

Director of Product Security will own and mature ACV’s product and application security program, integrating security throughout the SSDLC and CI/CD pipelines. The role leads a security team, defines secure coding standards, and partners with engineering to maintain a secure, compliant platform.

• Design, implement, and manage the end-to-end Product Security program, focusing on securing ACV's proprietary applications and code base
• Lead the adoption of DevSecOps practices, automating security tools and gates within CI/CD pipelines
• Establish and enforce SSDLC requirements, including secure coding standards
• Build, mentor, and manage a team of Product Security Engineers
• Oversee deployment and management of SAST/DAST/SCA tools and vulnerability remediation

You will drive DevSecOps adoption, manage SAST/DAST/SCA tooling, lead vulnerability remediation, and perform deep-dive security reviews of new products. The role emphasizes cloud security in AWS/GCP, secure configurations for containers/microservices/APIs, and compliance with SOC 2, GDPR, and CCPA.

The ideal candidate is a senior security leader with 10+ years in information security and at least 5 years directing product/app security in a cloud SaaS environment. They excel at building and maturing SSDLC programs, leading security teams, and communicating risk to executives while driving DevSecOps across AWS/GCP.

Preferred