Director, Security Engineering (AI)

Location: US-REMOTE; Remote

Salary: $200K–$225K

Company

Instructure creates products that support learning, education, and personal development.

What you will do

• Lead product security across R&D, including threat modeling, design reviews, release gates, product launch approvals, penetration testing, and bug bounty intake.
• Lead cloud and infrastructure security across AWS, including IAM, guardrails, infrastructure as code, patching, secrets rotation, privileged access, non-human access, and WAF standards.
• Define AI security standards and controls for prompt injection, excessive agent permissions, tool abuse, data leakage, RAG, connectors, third-party AI services, and shadow AI.
• Set security architecture, secure SDLC, vulnerability management, scanning gates, remediation SLAs, exception handling, and release criteria.
• Support customer security reviews, deliver Security Engineering commitments, and track Engineering commitments with the VP of Engineering.
• Hire, lead, and develop the Security Engineering team, including writing role descriptions and maintaining development plans.

Requirements

• 10+ years of experience in security engineering, including 5+ years leading security teams.
• Experience leading product security and cloud security teams, with hands-on depth in cloud environments.
• Practical knowledge of AI and LLM security risks, including prompt injection, agent abuse, and data leakage.
• Knowledge of frameworks such as OWASP Top 10 for LLM Applications and NIST AI RMF.
• Experience influencing senior Engineering leaders on design and risk trade-offs.
• Experience in SaaS, ideally involving regulated data such as education records covered by FERPA and COPPA.
• Must work remotely from the United States.
• Must pass a background check and identity verification; inaccurate personal or professional information results in disqualification.

Culture & Benefits

• Full-time employment includes competitive compensation and participation in an ownership program.
• Remote, hybrid, and in-office collaboration options vary by role, team, and location.
• Generous time off, local holidays, and an annual late-December “Dim the Lights” period, subject to departmental needs.
• Wellness programs, mental health support, learning resources, professional development tools, and tuition reimbursement.
• Technology and tools for work, an employee recognition program, and an inclusive culture focused on support and meaningful connection.

Hiring process

• All employees must pass a background check.
• Candidates may be required to verify their legal name, current physical location, contact number, and residential address in accordance with local privacy laws.