About This Role
This leadership role owns the end-to-end security posture of the company's cloud platform, infrastructure, and corporate environments. The Director of Security will build the operating rhythm, culture, and technical direction to scale the company securely, protecting customer AI workloads and ensuring trust as demand surges.
Responsibilities
- Own Security Strategy & Execution: Lead the security organization across multiple domains, including Cloud Security, Application Security, SecOps, and GRC (Governance, Risk, and Compliance), ensuring predictable, high-quality execution of security initiatives
- Implement Frameworks & Compliance: Partner with GTM and Legal to shape strategy and achieve/maintain critical compliance certifications (e.g., SOC 2, ISO 27001, HIPAA), translating regulatory requirements into clear technical scopes and measurable outcomes
- Build a High-Output Org: Hire, mentor, and grow security managers and senior ICs, creating a culture of ownership, speed, and craft in a remote-first environment
- Drive Secure Product Development: Embed security into the engineering lifecycle, running secure software development processes (SSDLC), threat modeling, architecture reviews, and automated vulnerability scanning without bottlenecking release velocity
- Threat Detection & Incident Response: Drive measurable improvements in platform resilience, establishing robust monitoring, logging, and alerting systems, and leading the incident response program to minimize MTTD (Mean Time to Detect) and MTTR (Mean Time to Respond)
- Customer Trust & Vendor Risk: Ensure the security posture translates directly to business value, acting as an executive sponsor for critical customer security conversations and managing third-party vendor risk assessments
- Security Automation & Tooling: Balance speed and security by heavily investing in automation, shifting security left by integrating testing and policy enforcement seamlessly into CI/CD pipelines and deployment workflows
- Architectural Stewardship Without Becoming a Bottleneck: Provide security oversight for infrastructure systems (GPU clusters, network perimeters, IAM, backend services), ensuring robust zero-trust principles and scalability
- Partner with Infrastructure Leadership: Coordinate dependencies cleanly with Infra/SRE teams to ensure secure infrastructure provisioning, network isolation, and high-availability operations
Requirements
- 7+ years leading security teams including managers and/or multiple squads, with a proven record of securing high-scale cloud platforms or infrastructure products
- Demonstrated ability to take complex security goals from concept through execution, balancing risk, scope, timelines, and business agility
- 8+ years building and securing SaaS, platforms, or IaaS products
- Deep technical understanding of modern cloud-native architectures, Kubernetes, Linux OS security, networking, and virtualization
