Director of Cyber Security

Ramp Talent; Pleasanton (CA); On-site; USD 325,000 - 420,000; Full time

Job summary

Ramp Talent collaborates with a confidential client to appoint aSenior Director of Security Operations & Platform Engineering. The role unites SecOps, risk management, and a ground-up DevEx platform to enable secure, rapid production in AWS for a high-volume e-commerce environment.

The ideal leader combines hands-on technical excellence with people leadership, executive communication, and a track record delivering measurable improvements in delivery speed and security posture.

Qualifications

• 15+ years in engineering, infrastructure, or security.
• 7+ years leading multiple teams including managers of managers and 30+ engineers.
• Track record running SecOps/InfoSec for high-traffic e-commerce with PCI DSS & SOC 2.
• Proven success building platform engineering/DevEx from ground up with measurable gains.
• Deep AWS security expertise across IAM, GuardDuty, Security Hub, KMS, WAF; serverless & containers.
• AI-first mindset with daily use of AI tools embedded in security and engineering workflows.

Responsibilities

• Build and lead SecOps: 24x7 detection and response with runbooks and SLAs.
• Own information security program including risk, policy, architecture reviews, audit readiness.
• Secure e-commerce surface: checkout, identity, fraud mitigation, WAF/edge protection.
• Drive Zero Trust, least-privilege identity controls, and secrets management.
• Apply AI to security operations and set guardrails for safe AI/LLM usage.
• Define Platform North Star and DevEx metrics; build Internal Developer Platform with IaC.
• Own CI/CD, observability, and SRE across AWS workloads; embed DevSecOps into platform.
• Partner with FinOps to drive cloud cost efficiency; hire and develop leadership bench.
• Translate risk and investment into clear business outcomes for execs and board.

Skills

Security leadership

Platform Engineering

AWS security

DevSecOps

AI-first mindset

Incident response

Executive communication

Tools

AWS IAM

GuardDuty

Security Hub

KMS

WAF

Terraform

Job description

Senior Director, Security Operations & Platform Engineering (Confidential Search)

ABOUT THE OPPORTUNITY

Ramp Talent is partnering with a well-established, multi-brand online learning company with a high-volume e-commerce business. The company is hiring a Senior Director to own how software is built, shipped, and protected across its portfolio.

This leader will run two organizations: an established Security Operations and Information Security function, and a Platform Engineering and Developer Experience (DevEx) organization that you will build from the ground up. The goal is to give every engineer a secure, self-service, AI-augmented path to production on AWS.

We're looking for a hands-on, AI-first technology executive who has protected high-volume e-commerce environments, built a platform team around a clear North Star, and scaled strong organizations through great people leadership.

WHAT YOU'LL DO

Security Operations & Information Security

• Build and lead SecOps: 24x7 detection and response, threat intelligence, vulnerability management, and incident command with clear SLAs and runbooks
• Own the information security program, including risk management, policy, security architecture reviews, and audit readiness for PCI DSS, SOC 2, and privacy regulations (CCPA, GLBA, HIPAA)
• Secure the e-commerce and payments surface: checkout, identity and account takeover, fraud and bot mitigation, WAF/edge protection, and vendor risk
• Drive Zero Trust access, least-privilege identity controls, and company-wide secrets management
• Apply AI to security operations (automated triage, AI-assisted detection engineering, agentic response) and set guardrails for safe use of AI and LLMs across the business

Platform Engineering & Developer Experience

• Define the Platform North Star and DevEx metrics (DORA, lead time, change failure rate, MTTR, developer satisfaction) and hold the org accountable to them
• Build an Internal Developer Platform with golden paths, self-service environments, and Terraform-based infrastructure-as-code so teams go from idea to production in hours, not weeks
• Own CI/CD, observability, and SRE practices (SLOs, blameless post-mortems) across AWS workloads (ECS, Lambda, RDS, event-driven services)
• Embed DevSecOps into the platform (scanning, SBOM, policy-as-code, secret detection) so the secure path is the default path
• Partner with FinOps to make cloud cost efficiency a first-class platform outcome

Leadership

• Champion an AI-first engineering operating model: AI-assisted coding, testing, incident resolution, and platform automation
• Hire and develop managers and senior ICs across SecOps, Platform, SRE, and DevEx
• Own budgets, vendor and tooling strategy, and ROI-driven investment cases
• Report risk posture and platform health to executives and the board, and partner closely with Product, Data, and engineering leaders

WHAT YOU BRING

Required

• 15+ years in engineering, infrastructure, or security
• 7+ years leading multi-team organizations, including managers of managers and 30+ engineers
• A track record running SecOps / InfoSec for a high-traffic e-commerce or digital commerce business, including PCI DSS and SOC 2 programs
• Proven success building a platform engineering or DevEx team from the ground up, with measurable gains in delivery speed and reliability
• Deep AWS expertise across security (IAM, GuardDuty, Security Hub, KMS, WAF), networking, containers, and serverless
• An AI-first mindset: you use AI tools daily and have embedded AI into security and engineering workflows at scale

Preferred

• Experience in EdTech, multi-brand, or regulated industries (financial services, healthcare)
• CISSP, CISM, or AWS Security Specialty certification

HOW YOU OPERATE

• Strong technologist: credible with principal engineers; can review architecture, threat models, and IaC and make sound calls under pressure
• Builder and operator: balances strategy with execution and runs calm, decisive incident response
• People leader: attracts and grows talent and builds accountable teams where security and DevEx are shared responsibilities
• Executive communicator: translates technical risk and platform investment into clear business outcomes

WHAT SUCCESS LOOKS LIKE IN YEAR ONE

• A measurable security posture baseline, reduced mean time to detect and respond, and clean PCI and SOC 2 audits
• A published Platform North Star with golden paths adopted by most product teams and improved DORA metrics
• A fully staffed, engaged leadership bench across SecOps and Platform, with AI embedded in daily operations

This is a confidential search. The company name will be shared with qualified candidates after an initial conversation with Ramp Talent. All inquiries are handled with discretion.