Head of Product Security

Head of Product Security

Requirements

• Proven experience in product/application security, including leadership or staff role.
• Deep experience with secure software design, cloud infrastructure, and DevSecOps.
• Expertise with security tools (e.g., Aikido, CodeQL, GitHub Advanced Security, Snyk, Burp, etc.).
• Familiarity with OWASP, NIST, and industry-standard security frameworks.
• Knowledge of secure architectures, application architectures, encryption, Cloud Security, and broader security technologies.
• A pragmatic, risk-informed mindset with excellent communication skills.
• Previous experience supporting security certifications and audits.

Responsibilities

• Drive strategic adoption of Secure SDLC practices across the engineering organization.
• Partner with DevOps and architecture teams to build secure-by-design systems.
• Lead and evolve technical security reviews, threat modeling, and penetration testing.
• Integrate and automate security tools into CI/CD pipelines (SAST, DAST, SCA, etc.).
• Guide engineering teams on vulnerability remediation and risk management.
• Define and own key security metrics and report progress to stakeholders and leadership.
• Influence and support compliance efforts (SOC2, ISO 27001/27701, PCI, MRC).
• Help sales and customer success teams build trust through security excellence.
• Define policies, standards, and procedures for product and application security.
• Provide expert-level operational support for security escalations from customers.

Preferred Qualifications

No preferred qualifications provided.