Head of Product & Platform Security, Secure by Default

Hidden Jobs; United States; Hybrid; USD 215,000 - 440,000; Full time

Benefits offered by this job

Equity

Bonus/Commission eligibility

Comprehensive benefits package

Hybrid work model

Job summary

Hidden Jobs in the United States is seeking a senior leader to own product and platform security end to end for a cloud, payments, and hardware platform serving restaurants and local businesses. Reporting directly to the CISO, the role shifts security from a compliance-led to an engineering-led function.

You will embed security engineers with developers, build paved roads, run SDLC, threat modeling, and software supply chain controls, and grow the security engineering team as scope expands.

Qualifications

• Experience leading a multi-team security engineering org.
• Deep cloud-native security experience: IaC, CI/CD security, containers, microservices.
• Proven ability to shift security left and reduce developer friction.
• Peers with senior engineering leaders and influence product security.
• Judgment on what to automate vs embed engineers.
• Engineering background in SaaS or cloud-native settings.

Responsibilities

• Partner with product/engineering leaders to embed security using AI/automation.
• Own shared services, guardrails, and secure defaults in a self-service platform.
• Run app and cloud security programs: SDLC, threat modeling, software supply chain.

Skills

Multi-team security leadership

Cloud-native security

Infrastructure as code

CI/CD security

Containers & microservices

Security left shift

Engineering collaboration

Job description

Hidden Jobs in the United States is seeking a senior leader to own product and platform security end to end for a cloud, payments, and hardware platform serving restaurants and local businesses. Reporting directly to the CISO, the role shifts security from a compliance-led to an engineering-led function.

You will embed security engineers with developers, build paved roads, run SDLC, threat modeling, and software supply chain controls, and grow the security engineering team as scope expands.