Senior Director of Cybersecurity Engineering

This is a fully remote position, open to applicants in Texas.

📋 Description

• Lead and expand the cybersecurity engineering organization.

• Own the strategy, roadmap, and delivery for Cloud & Infrastructure Security Engineering, Identity & Access Engineering, and Product/Application Security.

• Guide managers and senior individual contributors; recruit, develop, and retain security engineering talent in a remote-first environment.

• Establish technical standards, engineering practices, operating cadence, metrics, and prioritization discipline.

• Design the organization to incorporate adjacent functions such as Detection Engineering and Threat & Vulnerability Management.

• Determine the technical direction for securing Blue Yonder’s Azure-centered multi-cloud environment.

• Promote secure-by-default patterns, guardrails, and platform-level controls across network, compute, runtime, data, and identity layers.

• Manage cloud security posture, workload protection, secrets and key management, and infrastructure-as-code security.

• Oversee identity governance, authentication, authorization, privileged access, and joiner-mover-leaver automation.

• Advance Zero Trust and least-privilege access models.

• Integrate security into the SDLC through threat modeling, secure design review, SAST/DAST/SCA, and remediation workflows.

• Collaborate with Product and Engineering to shift security left while maintaining velocity.

• Establish and monitor application security posture and risk-reduction outcomes.

• Align engineered controls with compliance obligations and produce durable, test-ready evidence.

• Support certification and roadmap goals including FedRAMP and CMMC.

• Act as the engineering authority during audits, customer security reviews, and regulatory discussions.

• Collaborate with GRC, Security Operations, Product, Platform Engineering, and Customer Trust.

• Communicate security posture, risks, and progress to executive leadership and customers.

⛳️ Requirements

• 12+ years of experience, including 10+ years in cybersecurity with significant experience in security engineering, cloud security, or platform security roles.

• 6+ years of experience leading security engineering teams, including managers, in a dynamic SaaS or cloud-native environment.

• In-depth, hands-on experience with Azure security.

• Familiarity with AWS, GCP, and OCI.

• Proficiency in engineering systems, security controls, and regulatory frameworks.

• Strong understanding of cloud security posture and workload protection, identity and access management, application/product security, and secure infrastructure/IaC.

• Experience working in an audited environment, such as SOC 2 and/or ISO 27001 or equivalent.

• Exceptional executive communication skills.

• Preferred: experience with FedRAMP, CMMC, or other regulated/public-sector frameworks.

• Preferred: mature security tooling stack including CNAPP/CSPM, EDR, IGA/PAM, DSPM, SIEM, Microsoft Defender, Purview, and cloud-native security services.

• Preferred: identity governance and Zero Trust implementation at enterprise scale.

• Preferred: experience in Detection Engineering and/or Threat & Vulnerability Management.

• Preferred: CISSP, CCSP, or Azure security certifications.

• Preferred: background in engineering or software development.

🏝️ Benefits

• Comprehensive Medical, Dental, and Vision coverage.

• 401K with matching contributions.

• Flexible Time Off policy.

• Corporate Fitness Program.

• Voluntary benefits such as Legal Plans, Accident and Hospital Indemnity, Pet Insurance, and much more.

• Equal opportunity workplace that promotes inclusion and belonging.