Director, Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead and expand Runpod’s security organization encompassing Cloud Security, Application Security, SecOps, and GRC.

• Take full ownership of the security posture for the cloud platform, infrastructure, and corporate settings.

• Set the operating rhythm, culture, and technical direction for secure growth.

• Collaborate with Engineering, Product, GTM, Infrastructure, Legal, and SRE leadership teams.

• Develop strategies to achieve or maintain SOC 2, ISO 27001, and HIPAA compliance certifications.

• Convert regulatory requirements into technical scopes and quantifiable results.

• Recruit, mentor, and develop security managers and senior individual contributors.

• Integrate security into the engineering lifecycle through SSDLC, threat modeling, architecture reviews, and automated vulnerability scanning.

• Implement monitoring, logging, and alerting systems and lead incident response efforts.

• Enhance MTTD, MTTR, patch SLAs, defect escape rates, and overall security hygiene.

• Sponsor discussions on customer security and oversee third-party vendor risk assessments.

• Incorporate security testing and policy enforcement into CI/CD pipelines and deployment workflows.

• Oversee security for GPU clusters, network perimeters, IAM, backend services, zero-trust architecture, and scalable infrastructure.

• Collaborate with Infrastructure/SRE on secure provisioning, network isolation, and high-availability operations.

⛳️ Requirements

• Minimum of 7 years leading security teams, including managers and/or multiple squads.

• Demonstrated success in securing high-scale cloud platforms or infrastructure products.

• Ability to transition complex security goals from concept to execution.

• Over 8 years of experience in building and securing SaaS, platforms, or IaaS products.

• In-depth knowledge of cloud-native architectures, Kubernetes, Linux OS security, networking, and virtualization.

• Proven experience in fostering culture, accountability, and momentum within distributed teams.

• Familiarity with operational security metrics, including MTTD, MTTR, patch SLAs, and defect escape rates.

• Excellent written and verbal communication skills along with effective stakeholder management.

• Proficient in translating complex security risks into actionable business decisions.

• Successful completion of a background check is required.

• Candidates must be eligible to work in the United States.

• Runpod is currently not in a position to sponsor employment visas.

• Preferred: experience in securing cloud infrastructure, developer platforms, distributed compute, or bare-metal environments.

• Preferred: expertise in AI/ML security, model protection, GPU-cluster tenant isolation, and secure data pipelines.

• Preferred: experience in scaling security teams and implementing SOC 2/ISO 27001 compliance programs.

• Preferred: contributions to open-source security or recognized security research.

🏝️ Benefits

• Meaningful equity; all team members receive stock options.

• Comprehensive medical, dental, and vision plans.

• Flexible paid time off (PTO).

• Remote-first work culture.

• Inclusive and collaborative team utilizing Slack for internal communication.

• $1,200 stipend for home office and equipment.

• A learning-oriented environment focused on culture and ownership.