Director of Security Engineering

abnormalsecurity; United States; Remote; USD 214,000 - 308,000; Full time

Benefits offered by this job

Equity

Incentive pay

Job summary

abnormalsecurity is seeking a senior leader to head a security engineering organization responsible for protecting cloud services across commercial and federally authorized environments. Reporting to the CISO, this role drives major security programs, builds teams, and serves as a senior representative to executives, customers, and auditors.

You will guide architecture roadmaps, partner with engineering, IT, and product teams on security programs including AI governance, data controls, and

Qualifications

• At least 10 years in security or software engineering, including at least four years managing security teams.
• Production software engineering experience and the ability to assess security designs with an engineering perspective.
• A track record of building and scaling strong security teams.
• Deep knowledge of cloud-native security, including AWS multi-account governance, Kubernetes, identity and access, detection engineering, and secure software development practices.
• Strong cross-functional leadership, written communication, and confidence presenting to executives, customers, and auditors.

Responsibilities

• Act as the security leader’s deputy, representing the function to executives, customers, and regulators when needed.
• Lead, coach, and grow managers and senior engineers across security engineering and security operations.
• Set the security roadmap for cloud architecture, identity, detection and response, vulnerability management, and secure platform foundations.
• Partner with engineering, IT, and product teams on security programs, including AI governance, data controls, and federal compliance.
• Establish engineering standards that favor automation, code-based controls, and outcome measures.
• Build hiring and succession plans, manage performance, and communicate technical risk and security strategy to senior leadership and the board.

Skills

Security leadership

People management

Cloud security

Software engineering

Executive communication

Tools

AWS

Kubernetes

IAM

Job description

Role overview

Lead a security engineering organization responsible for protecting cloud services and supporting both commercial and federally authorized environments. Reporting to the chief information security officer, this technical leadership role owns major security programs, develops teams, and serves as a senior representative to executives, customers, and auditors. It calls for a software engineering background and a collaborative approach to making secure engineering practices easier to adopt.

Responsibilities

• Act as the security leader’s deputy, representing the function to executives, customers, and regulators when needed.
• Lead, coach, and grow managers and senior engineers across security engineering and security operations.
• Set the security roadmap for cloud architecture, identity, detection and response, vulnerability management, and secure platform foundations.
• Partner with engineering, IT, and product teams on security programs, including AI governance, data controls, and federal compliance.
• Establish engineering standards that favor automation, code-based controls, and outcome measures.
• Build hiring and succession plans, manage performance, and communicate technical risk and security strategy to senior leadership and the board.

Requirements

• At least 10 years in security or software engineering, including at least four years managing security teams.
• Production software engineering experience and the ability to assess security designs with an engineering perspective.
• A track record of building and scaling strong security teams.
• Deep knowledge of cloud-native security, including AWS multi-account governance, Kubernetes, identity and access, detection engineering, and secure software development practices.
• Strong cross-functional leadership, written communication, and confidence presenting to executives, customers, and auditors.

Nice to have

• Experience managing managers or teams of comparable scope.
• Experience building secure-by-default platforms that reduce risk and developer friction.
• Familiarity with compliance programs such as FedRAMP, SOC 2, or ISO 27001, or with securing AI and machine learning systems.
• Experience scaling security in a resource-constrained environment through automation.

Benefits and work setup

• Listed base salary range: $214,200-$308,000 USD. The role may also include incentive pay, equity, and benefits.