Director, Secure Applications & Product Innovation

Grainger; Chicago (IL); Hybrid; USD 164,000 - 273,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k) match

Tuition reimbursement

Job summary

Grainger seeks a Director, Application & Product Security to lead our security program for applications, APIs, and digital products. You will partner with Engineering, Product Management, Platform Engineering, Enterprise Architecture, and Security Architecture to embed secure development practices.

Based in downtown Chicago with hybrid work, this role requires deep expertise in SSDLC, threat modeling, and modern software delivery.

Qualifications

• Bachelor’s degree required in CS, cybersecurity, information systems, or software engineering.
• 10+ years of progressive experience in application security, product security, or related tech disciplines.
• 5+ years of leadership experience building security teams.
• Experience implementing SSDLC practices within large engineering organizations.

Responsibilities

• Lead Grainger’s enterprise Application & Product Security strategy.
• Build and lead a high-performing security organization.
• Establish governance for SSDLC, secure-by-design and secure-by-default practices.
• Partner with engineering and product teams to embed secure development standards.
• Lead threat modeling, design reviews, and security assessments for key initiatives.
• Define security requirements and reference architectures for apps, APIs, and cloud-native tech.

Skills

Security leadership

Application security

SSDLC

Secure software development

Threat modeling

API security

Education

Bachelor’s Degree in Computer Science / Cybersecurity / Information Systems / Software Engineering

Job description

Grainger seeks a Director, Application & Product Security to lead our security program for applications, APIs, and digital products. You will partner with Engineering, Product Management, Platform Engineering, Enterprise Architecture, and Security Architecture to embed secure development practices.

Based in downtown Chicago with hybrid work, this role requires deep expertise in SSDLC, threat modeling, and modern software delivery.