Head of Product Security & Secure SDLC

VELOTIC; Boston (MA); On-site; USD 175,000 - 210,000; Full time

Job summary

Velotic, a growing software company, seeks a Product Security Leader to build and harmonize a security program across two carved-out engineering entities. You will embed security throughout the SDLC, lead threat modeling, and drive secure practices with product management and engineering leadership.

The role reports to the Chief Product Officer, collaborates with the CISO and VP/Directors of Engineering, and partners with System Integrators and MSSP providers to advance a world-class security

Qualifications

• 8+ years of application security, product security, or secure software development experience.
• Leadership experience in security programs during organizational transitions is preferred.
• Deep technical security expertise across secure coding, threat modeling, and vulnerability management.
• Strong knowledge of OWASP and modern testing methodologies; secure software frameworks awareness.
• Proven ability to work with engineering teams, influence without authority, and manage vendor relations.

Responsibilities

• Build Velotic's product security program from the ground up across multiple teams.
• Establish a secure SDLC, select tools, and create a champions program.
• Coordinate with System Integrators and MSSP providers for security monitoring and testing.
• Lead threat modeling, vulnerability triage, remediation, and incident response.
• Govern security requirements, compliance (SOC 2, ISO 27001), and risk reporting to leadership.

Skills

Application security

Secure SDLC

Threat modeling

Cloud security

DevSecOps

Security tooling

Education

Bachelor's degree in CS/Cybersecurity/Software Eng

Master's degree preferred

Tools

SAST

DAST

IAST

SCA

Container security scanning

Penetration testing

Job description

Velotic, a growing software company, seeks a Product Security Leader to build and harmonize a security program across two carved-out engineering entities. You will embed security throughout the SDLC, lead threat modeling, and drive secure practices with product management and engineering leadership.

The role reports to the Chief Product Officer, collaborates with the CISO and VP/Directors of Engineering, and partners with System Integrators and MSSP providers to advance a world-class security