Senior Director, Product Security & Secure SDLC

Socket.dev; Wrocław; On-site; PLN 502,000 - 547,000; Full time

Benefits offered by this job

Annual bonus

Equity program

Remote-friendly policies

Premium private medical care

Job summary

Gainsight in Poland is seeking a Senior Director, Product Security to lead the security program for our cloud-native SaaS platform. You will define the product security strategy and drive Secure by Design across the software development lifecycle, partnering with Engineering, Product, and Infrastructure.

The ideal candidate has 15+ years across software or security, with 8+ years in leadership, deep expertise in threat modeling, architecture, API security, and modern authentication.

Qualifications

• 15+ years in software, security, or product security with at least 8 years in leadership.
• Proven experience building or scaling Product Security programs in SaaS/cloud-native environments.
• Deep expertise in Secure SDLC, threat modeling, architecture, API security, and modern auth frameworks.
• Ability to influence architecture and security strategy with engineering and product leadership.
• Strong knowledge of cloud-native architectures, Kubernetes, containers, and multi-tenant SaaS.

Responsibilities

• Mature the application security program.
• Increase test coverage across assets using SAST, DAST, SCA, and container scanning.
• Monitor security gates and auto-block high-severity policy violations.
• Lead and mentor a global Product Security team.

Skills

Security leadership

Secure SDLC

Threat modeling

Cloud-native

Kubernetes

API security

Vulnerability management

Cross-functional leadership

Executive communication

Tools

SAST

DAST

SCA

CI/CD security

Job description

Gainsight in Poland is seeking a Senior Director, Product Security to lead the security program for our cloud-native SaaS platform. You will define the product security strategy and drive Secure by Design across the software development lifecycle, partnering with Engineering, Product, and Infrastructure.

The ideal candidate has 15+ years across software or security, with 8+ years in leadership, deep expertise in threat modeling, architecture, API security, and modern authentication.