Director, App & Cloud Security Strategy

Jobtailor; California (MO); On-site; USD 150,000 - 210,000; Full time

Job summary

Jobtailor is seeking a senior security leader to guide the application security team and cloud security engineers across our org. You will define and execute the security strategy, partnering with engineering, DevOps, and architecture to embed security in every development stage.

You will establish security KPIs, drive secure SDLC practices, oversee SAST/DAST/SCA, and lead vulnerability management across AWS, Azure, and GCP, aligning with NIST, ISO 27001, SOC 2, and CIS benchmarks.

Qualifications

• Requires 7+ years experience with a bachelor’s degree or 5+ years with an advanced degree.
• 5+ years of managerial experience.
• Strong cloud platform expertise (AWS, Azure, or GCP).
• Deep understanding of secure software development and DevSecOps.

Responsibilities

• Lead and mentor the application security team and senior cloud security engineers.
• Define and execute the organization’s application and cloud security strategy.
• Partner with engineering, DevOps, and architecture teams to embed security into all stages of development.
• Establish security KPIs, metrics, and reporting for executive leadership.
• Drive secure SDLC practices including threat modeling, code reviews, and security testing.
• Oversee implementation of SAST, DAST, SCA, and API security tools.
• Develop and maintain secure coding standards and developer training programs.

Skills

Security leadership

Cloud security

Application security

Threat modeling

Secure SDLC

Kubernetes security

CI/CD automation

Zero Trust

DevSecOps

Incident response

Risk assessment

Audit/compliance

CISSP

Education

Bachelor's in CS/Cybersecurity

Master's degree preferred

Advanced degree

Tools

SAST

DAST

SIEM

CSPM

Container security

Kubernetes

Terraform

CloudFormation

Job description

Jobtailor is seeking a senior security leader to guide the application security team and cloud security engineers across our org. You will define and execute the security strategy, partnering with engineering, DevOps, and architecture to embed security in every development stage.

You will establish security KPIs, drive secure SDLC practices, oversee SAST/DAST/SCA, and lead vulnerability management across AWS, Azure, and GCP, aligning with NIST, ISO 27001, SOC 2, and CIS benchmarks.