Director, Product Security

16 days ago

Base Salary

$249k - $305k/yr

Responsibilities

Drive enterprise-wide adoption of secure-by-default engineering playbooks, paved paths, platform capabilities, and security controls.
Establish vulnerability intake, triage, ownership, remediation, verification, SLA, and escalation processes.
Coordinate integration of enterprise security tooling into CI/CD and production environments and automate compliance evidence collection.
Embed threat modeling, security architecture, approved patterns, and reference architectures into engineering workflows.
Shape pragmatic security requirements, compensating controls, sequencing, and platform changes when requirements are infeasible or costly.
Identify cross-domain architectural risks and drive alignment through engineering leadership and architecture governance.
Improve engineering security incident preparedness through runbooks, exercises, detection hooks, and post-incident actions.
Serve as the primary engineering counterpart to Global Security by translating policies, controls, tooling, and compliance requirements into adoptable engineering practices.

12+ years of progressive experience in information security, application security, cloud security, or software engineering.
Principal-level technical leadership and experience leading enterprise-scale security initiatives through influence rather than direct authority.
Strong application security fundamentals, including authentication and authorization, session security, secure API design, data protection, threat modeling, and secure SDLC practices.
Experience with pragmatic risk management, prioritization, tradeoff analysis, and adoption-oriented guardrails.
Cloud and platform security experience covering IAM, secrets management, key management, service-to-service authentication, and logging and detection fundamentals.
Experience integrating security checks into CI/CD with minimal developer friction.
Deep vulnerability management experience, including triage, remediation strategy, fix verification, and partnering with teams to close issues.
Excellent executive-ready writing, communication, and technical coaching skills.
Preferred experience with streaming/media security, DRM ecosystems, output protection, mobile and device security, iOS, Android, TV devices, secure storage, platform attestation, reverse engineering, client hardening, anti-tamper approaches, GRC, privacy, and legal or product policy partnerships.

Salary plus annual performance bonus potential is offered.
Flexible time-off policies are available.
Medical, dental, vision, short-term disability, long-term disability, and life insurance are provided.
Health Savings Account and health care and dependent care FSA programs are available.
401(k) plan with employer match is provided.
Employer-paid commuter benefit is available.
New-parent support, pet insurance, and some pet-friendly offices are offered.
The position is identified as hybrid.

iOS

1,001-5,000 employees