Senior Director, Product Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Responsibilities:
- Lead and mature the Product Security function at 1Password
- Set strategy, build and scale programs, and partner with engineering, product, and security leadership to reduce risk while enabling innovation
- Oversee Application Security and the software development lifecycle program
- Lead Data and Device Security, including cryptography, cryptographic libraries, secrets management, security libraries, frameworks, vulnerability remediation, and security standards
- Build and mature Privacy Engineering systems, controls, data management practices, and compliance
- Oversee Security Research activities, identify emerging threats and attack vectors, drive original research, and publish findings responsibly
- Manage and develop a team of security professionals and managers through 1-1s, performance feedback, career development, and hiring
- Define and drive company-wide Product Security strategy and establish metrics, reporting, and dashboards
- Develop secure coding practices, threat modeling, security reviews, and code analysis with emphasis on AI adoption
- Embed security into the SDLC and CI/CD pipelines from design to deployment
- Partner with Product, Engineering, Security, executives, and board-level stakeholders to balance security with business priorities
- Serve as a trusted advisor to the CISO and report directly to the CISO
- Represent Product Security in executive and board-level discussions
- Mentor and develop a high-performing security team
- Engage with the broader security community and bring research insights into product security programs
Requirements:
- 9+ years of progressive experience in security, with at least 5+ years leading security teams/programs at scale
- Bachelor's degree in Computer Science, Information Technology, Computer Engineering, or related fields; or equivalent work experience
- Deep expertise in Application Security, Privacy, and Secure SDLC programs
- Experience overseeing Security Research activities and engaging the security research community
- Strong track record of embedding security and privacy into engineering processes and influencing product development
- Proven experience leading security teams in high-growth technology or security-focused companies
- Excellent communication skills with ability to convey complex security issues to technical and non-technical stakeholders, including executives and boards
- Experience leading security initiatives that support and/or incorporate AI capabilities
- Demonstrated software development experience with Go, Ruby on Rails, shell scripting, Python, or other languages
- Experience collaborating across internal business or engineering units, external incident response teams, and research teams
- Thought leader with visibility in the security community, including public speaking, open-source contributions, or bug bounty engagement (a strong plus)
- Ability to foster psychological safety and stability in high-stress environments
Benefits:
- Health benefits
- Dental benefits
- 401k
- RRSP
- Generous paid time off
- Equity grant
- Incentive programs
- Maternity and parental leave top-up programs
- RSU program for most employees
- Retirement matching program
- Free 1Password account
- Paid volunteer days
- Peer-to-peer recognition through Bonusly
- Remote-first work environment
- In-person engagement, including offsites, team meetings, and customer/industry events
Similar Jobs
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Security Engineer II
Analista de Governança de TI apoiando controles, auditorias e riscos tecnológicos na Stone. Contribuição para a melhoria contínua dos processos de tecnologia da fintech brasileira de pagamentos.
Senior AWS DevOps/Security Engineer – Architect
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.
Senior Security Engineer, Product Security
Senior Security Engineer securing Komodo Health’s healthcare data platform, software supply chain, and AI features. Automating product-security testing and remediation across US-based engineering teams.
Senior Digital Security Specialist – Offensive and Defensive Security
Especialista sênior em segurança digital na Evertec, empresa de tecnologia financeira. Executando testes de intrusão e orientando remediações em aplicações, infraestrutura e nuvem.
Senior Instructor, Training – Cloud Security
Cloud security instructor delivering hands-on CNAPP and Falcon Cloud Security training. Developing courses, certification exams, and labs for CrowdStrike customers.
Cloud Azure Security Engineer
Cloud Azure Security Engineer securing Microsoft Azure environments for Monks, a global AI-powered transformation consultancy. Managing Entra ID, compliance controls, vulnerabilities, and cloud security automation.
Staff Product Security Engineer
Staff Product Security Engineer embedding with ServiceTitan engineering portfolios to secure SaaS applications, cloud infrastructure, and AI-enabled features. Driving threat modeling, remediation, paved-road adoption, and portfolio risk reduction.
Senior Information Security Coordinator
Coordenador sênior de segurança da informação no Bernoulli Educação, grupo educacional brasileiro. Gestão de riscos, LGPD, incidentes, vulnerabilidades e equipes.
Incident Response Product Security Engineer II
Incident response engineer securing Esri’s ArcGIS geographic-information software. Investigating vulnerabilities, facilitating red-team exercises, and advancing product security practices.
Security Assessor
Security Assessor evaluating federal information systems against NIST RMF and FedRAMP requirements. Conducting control assessments, risk analysis, ATO support, and compliance documentation remotely.
Staff Engineer, Security
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Security Architect – Zero Trust, Application Access
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.
Manager, Cloud Security Engineering
Cloud security engineering manager leading AWS, Azure, and GCP security teams for Workstreet’s compliance-focused client engagements. Building hardened infrastructure, automation, and audit-ready controls.
Security Engineer
Security Engineer owning vulnerability management, SIEM, and incident investigations. Securing cloud-native AWS environments for Arionkoder’s AI consulting clients.
IT Systems and Security Specialist I
IT systems and security specialist supporting Aspire Living & Learning’s service operations remotely. Maintaining IT systems and security while traveling periodically across the service area.
Associate, Cybersecurity – Data Privacy Incident Response
Associate attorney advising clients through cybersecurity incidents, data breaches, and breach notification requirements. Supporting Constangy's national Cybersecurity & Data Privacy practice.