Director, Security Engineering — AI, Cloud & Product Security

Instructure, Inc.; United States; Hybrid; USD 190,000 - 260,000; Full time

Benefits offered by this job

Ownership program

Flexible work culture

Generous time off

Wellness programs

Tuition reimbursement

Learning resources

Job summary

Instructure, Inc. is seeking a Director of Security Engineering to own how we build and run securely across product security, cloud and infrastructure security, and AI security.

You will drive threat modeling, design reviews, and release gates with R&D teams, own WAF and patch policies, and set AI safety standards for features and services. The role demands 10+ years in security engineering with leadership, hands-on cloud depth, and SaaS risk experience, including handling education data

Qualifications

• 10+ years in security engineering, including 5+ years leading security teams.
• Led product security and cloud security teams with hands-on cloud depth.
• Practical knowledge of AI and LLM security risks and NIST AI RMF.
• Influenced senior engineering leaders on design and risk trade-offs.
• Experience in SaaS, ideally handling regulated education data (FERPA, COPPA).

Responsibilities

• Own three core functions: product security integrated in R&D, cloud/infrastructure security across AWS, and AI security.
• Set security architecture standards and oversee vulnerability management and secure SDLC.
• Define controls for prompt injection, agent abuse, data leakage, and risk reviews for third-party AI services.
• Lead vulnerability management (Wiz across code and cloud) and ensure timely security reviews for customers.
• Hire, grow, and write job descriptions for the Security Engineering team.

Skills

Security leadership

Cloud security

AI/LLM security

Stakeholder influence

Education data

Tools

Wiz

GRC tools

Job description

Instructure, Inc. is seeking a Director of Security Engineering to own how we build and run securely across product security, cloud and infrastructure security, and AI security.

You will drive threat modeling, design reviews, and release gates with R&D teams, own WAF and patch policies, and set AI safety standards for features and services. The role demands 10+ years in security engineering with leadership, hands-on cloud depth, and SaaS risk experience, including handling education data