Senior Director, Product Security

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Lead and enhance the Product Security function at 1Password.

• Develop strategy, establish and scale programs, and collaborate with engineering, product, and security leadership to mitigate risk while fostering innovation.

• Supervise Application Security and the software development lifecycle program.

• Direct Data and Device Security efforts, encompassing cryptography, cryptographic libraries, secrets management, security libraries, frameworks, vulnerability remediation, and security standards.

• Build and advance Privacy Engineering systems, controls, data management practices, and compliance measures.

• Oversee Security Research initiatives, identify emerging threats and attack vectors, drive original research, and responsibly publish findings.

• Manage and nurture a team of security professionals and managers through one-on-ones, performance feedback, career development, and recruitment efforts.

• Define and implement a company-wide Product Security strategy, establishing metrics, reporting, and dashboards.

• Develop secure coding practices, threat modeling, security reviews, and code analysis with a focus on AI integration.

• Integrate security throughout the SDLC and CI/CD pipelines from design to deployment.

• Collaborate with Product, Engineering, Security, executives, and board-level stakeholders to align security with business priorities.

• Act as a trusted advisor to the CISO and report directly to the CISO.

• Represent Product Security in discussions at the executive and board levels.

• Mentor and cultivate a high-performing security team.

• Engage with the broader security community and incorporate research insights into product security programs.

⛳️ Requirements

• Over 9 years of progressive experience in security, with a minimum of 5 years leading security teams/programs at scale.

• Bachelor's degree in Computer Science, Information Technology, Computer Engineering, or related fields; or equivalent professional experience.

• Extensive knowledge in Application Security, Privacy, and Secure SDLC programs.

• Experience managing Security Research activities and engaging with the security research community.

• Strong history of integrating security and privacy into engineering processes and influencing product development.

• Proven experience in leading security teams within high-growth technology or security-focused organizations.

• Exceptional communication skills, capable of articulating complex security issues to both technical and non-technical stakeholders, including executives and boards.

• Experience in leading security initiatives that support and/or involve AI capabilities.

• Demonstrated software development skills in Go, Ruby on Rails, shell scripting, Python, or other programming languages.

• Experience collaborating with internal business or engineering units, external incident response teams, and research teams.

• Recognized thought leader in the security community, with visibility through public speaking, open-source contributions, or bug bounty participation (a strong advantage).

• Ability to create a psychologically safe and stable environment in high-stress situations.

🏝️ Benefits

• Health benefits.

• Dental benefits.

• 401k.

• RRSP.

• Generous paid time off.

• Equity grant.

• Incentive programs.

• Maternity and parental leave top-up programs.

• RSU program for most employees.

• Retirement matching program.

• Free 1Password account.

• Paid volunteer days.

• Peer-to-peer recognition through Bonusly.

• Remote-first work environment.

• In-person engagement opportunities, including offsites, team meetings, and customer/industry events.