Senior Engineering Director, Product Security

Lead product security strategy for a cloud-native SaaS serving millions, guiding secure-by-design practices across the SDLC. Set standards for AWS-based systems, APIs, mobile applications, and AI-enabled features while partnering with engineering to reduce systemic risk.

• Execute forward-looking product security strategy
• Own and mature the secure SDLC (threat modeling, design reviews, application security testing)
• Establish standards for securing AWS-based cloud-native systems, APIs, mobile applications, and AI-enabled features
• Drive measurable reductions in systemic risk and security debt
• Prioritize security work based on risk and business impact

This role owns and matures the secure SDLC, including threat modeling, security and privacy design reviews, application security testing, and software supply chain protections. It also establishes production controls and security standards for AWS-based cloud-native architectures, with coverage extending to APIs, mobile applications, and AI-enabled features.

The ideal candidate is a senior product security leader who can set and mature a secure-by-design program across the secure SDLC. They have strong AWS cloud security expertise, lead threat modeling and application security testing, and establish security and privacy standards that translate strategy into engineering execution for a cloud-native SaaS organization.