Director of Security

We’re hiring our first Director of Security to handle our growing security demands. You’ll take major ownership: define the strategy, build the program (and team), and partner with other departments to ship fast and safely.

• Lead incident response, on-call, and tabletop exercises; drive continuous MTTR/MTTD improvements.
• Stand up and operate security tooling (SIEM, EDR, vuln/CSPM, secrets management).
• Embed AppSec in the SDLC: threat modeling, secure code review, SAST/DAST/dep scanning, release gates.
• Define and track security KPIs; maintain a risk register and roadmap.
• Harden cloud/network perimeter (WAF, DDoS, IAM, key/secret hygiene).
• Run vulnerability management with clear SLAs; coordinate pen tests and disclosure/bug bounty.
• Partner with Product, Engineering, and Compliance on data protection and secure payment flows.

• 8+ years in security with deep, hands-on experience in both SecOps and AppSec; 4+ years leading programs/teams.
• Strong cloud security background and modern CI/CD practices.
• Proven incident response and detection engineering track record.
• Experience implementing SDLC security controls and automation.
• Excellent cross-functional communication in a high-growth environment.