Director of Product Security

thrively; Santa Monica (CA); On-site; USD 180,000 - 280,000; Full time

Job summary

Thrively seeks a Director of Product Security to lead a modern program embedded within engineering, setting strategy and driving security across the SDLC. You will guide remediation, influence tech leaders, and scale security at fintech speed.

You'll own the security program, grow a talented team, and partner with Engineering, Product, and DevOps to ship secure products that power consumer financial experiences.

Qualifications

• Bachelor's degree required.
• 8+ years of Information Security experience.
• 2+ years focused on Product Security or Application Security.
• 3+ years leading technical security teams.
• Experience building or maturing Product Security programs.
• Deep understanding of secure software development practices.
• Experience partnering with software engineering to integrate security into workflows.
• Proven ability to influence cross-functional leaders.
• Excellent communication for technical and executive audiences.

Responsibilities

• Own and execute the organization's Product Security strategy, roadmap, and long-term vision.
• Lead, mentor, and grow a high-performing Product Security team.
• Partner closely with Engineering, Product, and DevOps teams to embed security throughout the software development lifecycle.
• Build scalable, automated security capabilities within modern CI/CD pipelines.
• Establish security architecture standards and secure-by-design principles for new products and platform enhancements.
• Evaluate emerging security technologies, tools, and vendors to continually strengthen the organization's security posture.
• Prioritize security initiatives based on business impact and risk while influencing engineering and executive stakeholders.
• Perform deep technical reviews of application security findings and partner directly with engineering teams through remediation.
• Develop security policies, standards, and engineering best practices that elevate security maturity across the organization.
• Identify product security risks and drive strategic improvements that strengthen customer trust and platform resilience.

Skills

Product Security

Information Security

Security Leadership

Secure SDLC

Threat Modeling

Education

Bachelor's degree

Tools

SAST

DAST

SCA

CI/CD tooling

Job description

Help Shape the Future of Product Security in Fintech

Thrively has partnered with a rapidly evolving financial technology company whose platform powers millions of consumer financial experiences each year. Their products sit behind some of the largest brands in retail and digital commerce, making this an opportunity to build security at massive scale.

We're seeking a Director of Product Security to lead and evolve a modern Product Security program that is deeply embedded within engineering. This is a highly visible leadership opportunity for someone who thrives on building programs, influencing engineering culture, and partnering with technical leaders to deliver secure products without sacrificing speed or innovation.

You'll own the Product Security strategy, lead a talented team, and work alongside Engineering, Product, and DevOps leaders to build security directly into the software development lifecycle.

While this is a leadership role, we're looking for someone who still enjoys rolling up their sleeves - someone who can dive into complex technical findings, guide engineering teams through remediation, and help shape the future of secure software development across the organization.

If you're passionate about building secure products, enabling engineering teams, and creating security programs that scale, we'd love to tell you more.

What You'll Do

• Own and execute the organization's Product Security strategy, roadmap, and long-term vision.
• Lead, mentor, and grow a high-performing Product Security team.
• Partner closely with Engineering, Product, and DevOps teams to embed security throughout the software development lifecycle.
• Build scalable, automated security capabilities within modern CI/CD pipelines.
• Establish security architecture standards and secure-by-design principles for new products and platform enhancements.
• Evaluate emerging security technologies, tools, and vendors to continually strengthen the organization's security posture.
• Prioritize security initiatives based on business impact and risk while influencing engineering and executive stakeholders.
• Perform deep technical reviews of application security findings and partner directly with engineering teams through remediation.
• Develop security policies, standards, and engineering best practices that elevate security maturity across the organization.
• Identify product security risks and drive strategic improvements that strengthen customer trust and platform resilience.

What We're Looking For

• Bachelor's degree required.
• 8+ years of experience in Information Security.
• 2+ years of experience focused on Product Security or Application Security.
• 3+ years of experience leading technical security teams.
• Demonstrated success building or maturing Product Security or Application Security programs.
• Deep understanding of secure software development practices and modern application security.
• Experience partnering closely with software engineering organizations to integrate security into development workflows.
• Proven ability to influence cross-functional leaders and drive organizational change.
• Strong technical depth with the ability to balance strategic leadership and hands-on execution.
• Excellent communication skills with the ability to translate complex security concepts for both technical and executive audiences.

Ideal Experience

• Product Security
• Application Security
• Secure Software Development Lifecycle (SSDLC)
• DevSecOps
• CI/CD Security
• Threat Modeling
• Security Architecture
• Vulnerability Management
• SAST, DAST, and Software Composition Analysis (SCA)
• Engineering Leadership
• Security Strategy & Governance

Why This Opportunity?

This is an opportunity to make a meaningful impact at a company where security is viewed as a strategic investment—not simply a compliance requirement. You'll help shape the future of Product Security by partnering directly with engineering leadership, influencing technical direction, and building security into products that power millions of consumer financial experiences every year.

You'll have the autonomy to build, the technical depth to stay close to the work, and the executive visibility to drive lasting change across the organization.