Director of Product Security (Cybersecurity)

Location: Mountain View, California, United States; on-site five days per week

Salary: $243,699–$271,644 USD annual base salary, excluding bonus, equity, and benefits.

Company

A digital identity platform that enables secure identity verification and login across government agencies, healthcare organizations, and consumer brands.

What you will do

• Own the Product Security program across threat modeling, secure code and architecture reviews, software composition analysis, secret scanning, vulnerability management, CSPM, and configuration management.
• Lead, grow, and support a team of security engineers, including their professional development and well-being.
• Define clear, outcome-oriented security requirements and enable Engineering teams to self-serve secure practices.
• Partner with Product and Engineering during design and architecture to build security into products before release.
• Build and maintain security tools and services that support high-velocity software delivery.
• Own penetration testing and red-team execution, findings, and remediation outcomes.

Requirements

• Demonstrated outcome-based leadership and accountability for reducing risk and driving remediation to closure.
• Strong partnership skills with Engineering, including the ability to communicate security requirements in practical business and technical terms.
• Technical depth across threat modeling, code and architecture review, SCA/SAST, secret scanning, vulnerability management, and cloud security/CSPM.
• Ability to make fast, well-judged assessments and apply appropriately scaled security rigor.
• Experience handling privileged access with discretion and building a transparent, trust-based security culture.
• AI fluency and the ability to champion AI-augmented security workflows.

Nice to have

• Experience building or maturing an Application Security, Security Engineering, or Product Security program in a fast-shipping, cloud-native environment.
• Experience with GCP, GitHub, Kubernetes/GKE, Apigee, Terraform, and modern CI/CD.
• Hands-on experience with Socket.dev, Sysdig, Trivy, DependencyTrack, or HackerOne.
• Experience using Claude, Gemini, or Vertex AI in security workflows.
• Growth-stage experience building new capabilities rather than only maintaining existing programs.

Culture & Benefits

• Full-time, in-office work with a practical, outcome-driven approach to security.
• AI-first security organization focused on safe use of company-provisioned AI tools.
• Cross-functional collaboration across Product Security, SecOps, GRC, IT, and Physical Security.
• Medical, dental, vision, HSA, FSA, life and disability insurance, and a 401(k) with company match.
• Unlimited paid time off subject to policy, company holidays, parental leave, and learning and development benefits.
• Additional benefits include commuter accounts, employee assistance, pet insurance, travel assistance, and well-being and childcare discounts.