Director - Product Security

About Our Company

We are a leading provider of a comprehensive Agentic AI platform tailored for the Office of the CFO. Our solution integrates over 180 agents automating full end-to-end workflows in Order-to-Cash, Close & Reconciliation, Consolidation & Reporting, Accounts Payable, B2B Payments, and Treasury functions. Recognized as an industry leader by Gartner, IDC, and Forrester, we serve more than 1300 enterprises including 3M, Unilever, Bristol-Myers Squibb, Red Bull, and Lufthansa, achieving rapid deployment times of 3-6 months and guaranteed operational KPI improvements.

Role Overview

The Director of Product Security holds the pivotal responsibility of shaping and guiding the security posture of our entire software suite. This role combines technical leadership in offensive security disciplines such as Red Teaming and Vulnerability Assessment with high-level governance and strategy. The position drives a "Security-First" culture within engineering, balancing fast product delivery with uncompromising security standards.

Key Responsibilities

• Develop and implement a multi-year strategic roadmap emphasizing proactive security resilience over reactive fixes.
• Establish and champion a "Security Champions" initiative to decentralize security accountability across engineering teams.
• Effectively communicate technical risks to executive leadership and the board, highlighting security as a business enabler.
• Design and oversee Secure Software Development Lifecycle (SDLC) by integrating tools like SAST, DAST, and SCA into automated CI/CD pipelines using platforms such as GitHub, GitLab, and Jenkins.
• Lead a cross-functional team in conducting Vulnerability Assessments, Penetration Testing for Web, Mobile, and Network platforms, alongside orchestrating advanced Red Team operations to enhance detection and response mechanisms.
• Manage cloud security posture using Cloud Security Posture Management (CSPM) for environments including AWS, Azure, and Google Cloud Platform, preventing configuration drift and security gaps.
• Serve as the authoritative reviewer for security architecture on critical product features.
• Implement stringent metrics and KPIs for tracking vulnerability remediation, SLA compliance, and overall security performance.
• Handle budgeting and vendor negotiations for security tools and operations including the management of CapEx and OpEx.
• Lead recruitment, mentorship, and performance evaluations for a globally distributed security engineering and research team.

Qualifications and Requirements

• Over 10 years of experience in cybersecurity with a minimum of 5 years in leadership or management roles.
• Deep expertise in security principles including OWASP Top 10, SANS Top 25, and cloud-native security practices.
• Proven background in managing advanced offensive security activities including Red Teams and penetration testing initiatives.
• Hands-on proficiency with modern security solutions such as Snyk, Checkmarx, Wiz, Prisma Cloud, and Burp Suite.
• Academic qualifications include a Bachelor’s or Master’s in Computer Science or related disciplines.
• Professional certifications such as CISSP, CISM, OSCP, or OSCE are highly desirable.

Compensation and Additional Benefits

• Competitive salary package commensurate with experience.
• A vibrant and engaging workplace culture promoting fun and collaboration.
• Commitment to equal employment opportunities for all candidates.
• Unique opportunity to contribute to a pre-IPO global SaaS leader on a growth trajectory.