Own the strategy, delivery, and lifecycle of our security program across applications, cloud/infrastructure, identity, data, and SOC operations.
Lead secure-by-design practices, incident readiness, and AI security governance while partnering with executives and cross-functional leaders to deliver measurable risk reduction and compliance at scale.
Establish secure SDLC and architecture guardrails, ensures detection and response effectiveness, governs security vendors and budgets, and drives process transformation.
Collaborate closely with Engineering/Platform on CI/CD and Kubernetes, with IT for endpoint and access policy enforcement, with Data on protection and lineage, and with Legal/Compliance on SOC 2/SOX/GDPR and AI governance.

10+ years in Security Engineering with 5+ years leading managers and multi-domain portfolios (SOC/IR, AppSec, Cloud/Infra, Identity)
Hands-on leadership with:
AWS multi-account security (Organizations, Control Tower, IAM, SCPs, GuardDuty, Security Hub, Macie, KMS, CloudTrail, Config)
Kubernetes/EKS, container security, service mesh, ingress, and secrets management (Vault/Secrets Manager)
Secure SDLC with CI/CD (GitHub/GitLab), Terraform/Terragrunt, OPA/Conftest, SAST/DAST/SCA (CodeQL, Semgrep, Snyk, ZAP/Burp)
Web/API protections (AWS WAF/Cloudflare), SBOM/signing (Syft/Grype, Cosign/Sigstore), Dependabot/Renovate, Gitleaks
Endpoint/Network security (Palo Alto/Fortinet, Zscaler/ZTNA, CrowdStrike/SentinelOne, Jamf/Intune)
Identity/SSO with Azure AD/Entra ID, PIM, Conditional Access, SCIM; Okta or AWS IAM Identity Center
SIEM/SOAR (Cyrebro; Tines/XSOAR) and threat intel (MISP/OpenCTI); GRC (Drata/Vanta/ServiceNow), Jira/Confluence
Proven delivery of large-scale security transformations and measurable risk reduction; executive presence and board/audit experience.
Excellent leadership, stakeholder management, and team-building skills.
Strong problem-solving, analytical abilities, and crisp decision-making.
Exceptional communication and interpersonal skills.
Ability to operate under pressure and manage multiple priorities.

Director of Engineering, Security

Key skills