This role reports directly to the CISO, is based in the US, and is fully remote.
What You'll Do
Design and execute against a Product Security target operating model (people, process, and technology) that incorporates forward-leading agile and DevSecOps best practices.
Set the tone for the Product Security team culture leveraging best practices in highest performing team building.
Partner closely with peers in Product Development to integrate security while also ensuring developer enablement.
Direct the analysis, evaluation, and enhancement of the effectiveness of Product Security postures at procedural and technological levels.
Use knowledge of current Product Security best practices and industry trends to lead the implementation of Product and Cloud Security solutions.
Provide strategic and technical leadership with respect to the development and execution of key Product Security services to our developer community, including:
o Performing security architecture reviews of applications in design and production phases.
o Identifying potential threats and attacks to applications systems through threat modeling and providing risk-based mitigation recommendations.
o Ensuring adherence to vulnerability management processes and SLAs.
Lead architects and engineers to
o Gain a deep understanding of our current state security architecture.
o Define target state security architecture / multi-year roadmaps and execute secure designs that adhere to security standards, compliance requirements, and best practices.
o Anticipate possible security threats and identify areas of weakness in the current state architecture; respond promptly and effectively to support the security operations team, as needed, with investigating possible breaches of security and root cause analysis.
o Gather and analyze functional requirements and lead proof of concept activities with key business users and stakeholders in support of advanced use cases.
o Work with partner organizations to understand business requirements and develop security solutions to enable the business strategy.
Oversee the planning, scheduling, and resource allocation for Product Security initiatives, ensuring projects are completed on time, within scope, and on budget.
Collaborate with Cybersecurity and other internal teams, including IT, product, and operations, to ensure Product Security initiatives meet regulatory, industry, and security standards.
Act as the primary point of contact for all Product Security-related inquiries, escalating issues as needed to senior leadership and external stakeholders.
Drive continuous improvement efforts within cybersecurity processes, incorporating best practices and lessons learned.
Prepare and deliver presentations and reports to executives, stakeholders, and auditors on the status and effectiveness of Product Security program.
Participate in customer-facing calls and review customer contracts to address Product Security-related inquiries.
What You'll Bring
Up-to-date knowledge of the current Product Security threat landscape and industry best practices.
Bachelor’s degree in Computer Science, Information Security, Business Administration, or a related field. Master’s degree preferred.
8+ years of relevant experience in Product, Application, and Cloud Security, with 3 years of Product Security leadership experience preferred.
Proven track record of solving complex Product and Cloud Security issues and protecting products using a risk-based approach.
Experience with establishing Secure SDLC frameworks and evaluating DevSecOps programs to determine how to embed security activities within by partnering with product teams.
Experience supporting recruiting, technical interview screening, and team development.
Ability to innovate and find creative solutions that balance the needs of the business with the needs of security.
Ability to interact with a broad cross-section of personnel to explain and enforce security measures.
Effective executive functioning and presentation skills.
Strong leadership, communication, and interpersonal skills, with the ability to influence stakeholders at all levels of the organization.
Strong analytical skills with the ability to prioritize, manage competing demands, and meet deadlines.
Minimal travel (<10%).
We'd Love to See
Understanding of cybersecurity frameworks, risk management principles, and industry standards (e.g., NIST, ISO 27001, CIS, GDPR, FedRAMP, Common Criteria).
Cybersecurity certifications (e.g., CISSP, CISM, CSSLP, CCSP, or similar).
Familiarity with Jira and Confluence.
Background in Software development.
Why work at Delinea?
We're passionate problem-solvers helping the world's largest organizations protect what matters most: their human and machine identities.
We invest in people who are smart, self-motivated, and collaborative.
What we offer in return is meaningful work, a culture of innovation and great career progression.
At Delinea, our core values are STRONG and guide our behaviors and success:
Spirited - We bring energy and passion to everything we do
Trust - We act with integrity and deliver on our commitments
Respect - We listen, value different perspectives, and work as one team
Ownership - We take initiative and follow through
Nimble - We adapt quickly in a fast-changing environment
Global - We embrace diverse people and ideas to drive better outcomes
We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie.
We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays.
Delinea is an Equal Opportunity and Affirmative Action employer and prohibits discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.
