Director, Software Engineering

This is a fully remote position, open to applicants in Massachusetts.

📋 Description

• Identify and prioritize issues across squads, including platform modernization, authentication, dependency health, and security.

• Collaborate with Staff Engineers to define problems, scope, timelines, and technical risks for various initiatives.

• Present cross-functional projects to R&D leaders for prioritization in upcoming cycles.

• Support teams in delivering cross-functional projects and making technical decisions.

• Recruit, develop, guide, and mentor Staff Engineers.

• Evaluate technical trade-offs and advocate for team decisions.

• Lead Ellevation's security initiatives and establish ownership and escalation protocols.

• Incorporate security findings into engineering tools and workflows.

• Integrate threat modeling into work planning processes.

• Oversee incident response, vendor and third-party risk management, security awareness, questionnaires, and penetration testing.

• Manage compliance evidence and coordinate contributions across engineering and product teams.

• Maintain Ellevation's relationship with Curriculum Associates' central security organization.

• Collaborate on security standards, SLAs, KPIs, scanning configurations, and reporting mechanisms.

• Provide weekly updates to CA stakeholders on remediation efforts, obstacles, and security KPIs.

• Represent Ellevation in CA security forums.

• Report to the VP of Engineering and engage in R&D leadership decision-making.

⛳️ Requirements

• Over 10 years of experience in software engineering, including leadership of engineering teams.

• Proven experience in hiring and guiding senior and staff-level engineers, fostering their growth as technical leaders.

• Demonstrated ability to manage large, ambiguous technical challenges across teams and see them through to completion, even when those teams do not report directly to you.

• Solid technical foundation in modern web applications, cloud infrastructure, and CI/CD practices.

• Knowledgeable in application security, cloud security, compliance, and incident response strategies.

• Hands-on experience with tools for SAST, SCA, and dependency scanning.

• Proven ability to drive decisions in a matrixed organization.

• History of effectively communicating technical and security risks to executive stakeholders.

• Experience with sensitive or regulated data is highly desirable.

🏝️ Benefits

• Option for remote work.

• Full-time employment.