Director of Security Engineering

Abnormal Security Corp.; United States; Sur place; USD 180 000 - 260 000; Plein temps

Avantages offerts par ce poste

Healthcare

Flexible PTO

401k

One Medical

Flexible Spending Account

Mental Health Resources

Home Office Stipend

Monthly Internet & Phone Stipend

Health and Wellness Stipend

Résumé du poste

Abnormal Security Corp. is seeking a Director of Security reporting to the CISO to lead Security Engineering and Operations.

You will build and scale high-performing security teams, own major programs end to end, and operate autonomously in the CISO’s absence while representing security to executives, customers, and auditors. Requirements include deep technical fluency in AWS/Kubernetes, detection engineering, identity and access, and secure-by-default platform investments, with experience in

Qualifications

• Deep technical fluency in cloud-native environments (AWS orgs, multi-account governance, Kubernetes).
• Experience shipping production software and evaluating security solutions like an engineer.
• Strong written communication and executive presence for C-level, customers, auditors.

Responsabilités

• Lead and scale Security Engineering and Security Operations teams.
• Own the security engineering roadmap: cloud security, detection & response, identity, risk management.
• Partner with Engineering, IT, and Product; represent security to executives, customers, and regulators.

Connaissances

Security leadership

Cloud security

Kubernetes security

Identity & access management

Detection engineering

Security automation

Executive communication

Cross-functional collaboration

Security architecture

AI/ML security governance

Description du poste

• Abnormal AI protects organizations from the most sophisticated email and collaboration attacks using behavioral AI. Security is not a bolt-on at Abnormal; it is core to the product we sell and the trust our customers place in us
• Our security organization operates a commercial cloud environment and a separate FedRAMP-authorized environment, and we are pursuing increasingly rigorous federal authorizations as we grow
• We are hiring a Director of Security reporting to the CISO and leading the Security Engineering organization. You will build and scale high-performing security teams, own major security programs end to end, and operate autonomously in the CISO’s absence, including representing security to executive leadership, customers, and auditors
• We run security the way the best engineering-led companies do:
• Security reduces toil. Our job is to make the rest of the company faster and safer at the same time. If a control adds friction without reducing risk, it is a defect
• Paved paths, safe by default. We invest in guardrails, golden paths, and secure-by-default infrastructure so the easy choice is the secure choice. We prefer preventing classes of problems over chasing individual findings
• Partnership over gatekeeping. Security succeeds only through deep collaboration with engineering, IT, and business teams. We embed with builders, we ship alongside them, and we take on their constraints as our own
• Engineering-grade rigor. We treat security problems as engineering problems: automated, measurable, code-reviewed, and continuously improved
• If the security cultures that value freedom and responsibility, context over control, and guardrails over gates resonate with you, you will feel at home here
• Serve as deputy to the CISO: act with full authority in the CISO’s absence and represent the security organization to executives, customers, and regulators
• Lead, coach, and grow managers and senior engineers across Security Engineering and Security Operations
• Own the security engineering roadmap: cloud security architecture (AWS-first), detection and response, identity, vulnerability management, and secure-by-default platform investments
• Drive cross-functional programs with Engineering, IT, and Product, from AI security governance to data perimeter controls to federal compliance initiatives
• Set and defend engineering standards for the security organization: everything as code, automated where possible, measured against outcomes rather than activity
• Build hiring pipelines and raise the bar on every hire; own performance management, promotion cases, and succession planning within your teams
• Translate technical risk into business terms for the executive team and board, and translate business priorities into a coherent security strategy
• You will inherit strong teams, an executive staff that treats security as a first-class function, and a CISO who wants a true partner rather than a lieutenant. The scope is broad, the autonomy is real, and the ceiling on this role is defined by what you take on

Benefits

• Healthcare
• Flexible PTO
• 401k
• One Medical
• Flexible Spending Account
• Mental Health Resources
• Home Office Stipend
• Monthly Internet & Phone Stipend
• Health and Wellness Stipend

This is a role for a deeply technical leader with a software engineering background who has grown into people leadershipYou have built security teams from the ground up, you write and review code and architecture when it matters, and you believe the best security organizations earn their influence through partnership rather than policy enforcementDeep technical fluency in cloud-native environments: AWS organizations and multi-account governance, Kubernetes, identity and access, detection engineering, and modern SDLC securityA Genuine software engineering background: you have shipped production software, and you evaluate security solutions the way an engineer wouldStrong written communication: you produce decision-ready documents and can drive alignment asynchronouslyA proven record of building and scaling high-performing security teams, with alumni who would work for you again10+ years in security or software engineering, including 4+ years managing security teams, ideally including managers of managers or equivalent scopeDemonstrated cross-functional leadership: you have earned the trust of engineering leaders and shipped security outcomes through their teams, not around themExecutive presence: comfortable presenting to C-level leadership, customers, and auditors without preparation from the CISOYou are currently a security engineering manager or senior manager at a fintech, high-growth startup, or forward-leaning enterprise, and you are ready for broader scopeYou have built paved-path or secure-by-default platforms that measurably reduced both risk and developer frictionExperience with compliance-driven environments (FedRAMP, SOC 2, ISO 27001) without letting compliance define the security programExperience securing AI/ML systems or governing AI adoption at scaleYou have operated in environments where security headcount was scarce and automation was the only way to scale