Director, Security

Provide guidance and tools to developers that help prevent the authoring of vulnerabilities. Support continued compliance with SOC2, ISO, FedRamp, DOD IL4 and other currently required standards and act as Product and Engineering technical lead. Ensure operation of related controls. Coordinate the collection and submission of required evidence for audits. Lead incident response activities and post-mortem analysis for any security breaches or incidents, liaising with the Legal, Security and Privacy teams on data protection, ensuring root causes of such breaches are understood and addressed. Diagnose problems around web application security and design appropriate technical solutions. Collaborate and coordinate with other engineering teams and leaders to ensure security best practices are followed across the organization. Be responsible for delivery of products and features shipped by your team. Instill industry best practices and participate in internal/external technical presentations. Prioritize, plan projects and features, manage risk and track external commitments. Work with customers directly around reported security issues, articulate roadmap and provide reassurance around remediation, timelines and best practices. Lead a team of software engineers and security engineers by setting short and long-term goals and success metrics. Mentor/coach other engineers to help them perform at their best. Set technical direction and standards across the team, including serving as a senior engineer for code reviews and best practices. Actively participate in interviewing and hiring new talent. Manage engineers reporting to you directly, meeting with them regularly to ensure they are meeting their goals and helping with their career development. Strong expertise in software engineering best practices Strong knowledge of security best practices, threat modeling, risk assessment, and vulnerability management. Strong experience in product security, application security or related Deep understanding of security principles, techniques, and technologies Practical knowledge of security technologies, especially those applying to SaaS Web applications Ability to provide strategic product security mentorship based on experience performing threat modeling and design reviews to assess security implications and requirements Expertise in secure coding practices and familiarity with programming languages such as Python, C/C++, Java, or similar. Excellent problem-solving skills and the ability to work effectively under pressure. Strong communication skills, with the ability to convey complex security concepts to both technical and non-technical stakeholders. BS/MS/PhD in Computer Science or related field is preferred, or equivalent experience Min of 2+ years of experience in a team management role MIn of 2+ years of experience in a prior/current Software development role Strong written and verbal communication skills, with high attention to detail Ability to communicate with empathy when delivering constructive feedback to engineers