Product Security Lead — Incidents, Automation & Risk

LaunchDarkly Group; Oakland (CA); On-site; USD 205,000 - 281,000; Full time

Job summary

LaunchDarkly is seeking a senior security leader to run Product Security and partner with the Director of Security. You’ll shape a risk-led program where engineering owns security health and automation and AI handle first-pass findings.

You will scale this model across the division. You’ll manage a team of security engineers, act as incident manager, approve vendor and access decisions, and cover operations when the Director is unavailable.

Qualifications

• 5+ years of experience in a formal security or engineering management role, including managing senior engineers.
• Experience moving a security function from gatekeeper to team ownership, with measurable results.
• Experience as incident manager for security incidents at a SaaS company, including external communication.
• Experience guiding teams through technical tradeoffs and developing senior engineers' careers.
• The ability to track and drive metrics, and the wisdom to understand what they can and can't tell you.
• Familiarity with AWS security at scale and with external audits (SOC 2, ISO 27001, or FedRAMP) as a participant or control owner.
• Excellent communication skills with both technical and non-technical stakeholders.
• A thoughtful, empathetic approach to leadership and collaboration.

Responsibilities

• Manage the portfolio of your team's work, appropriately managing everyone's time and assigning them to the highest priority work.
• Help your team and the engineering organization make sense of, and simplify, how security work gets done: who owns what, what is automated, and what Security stops doing.
• Guide product engineering teams in owning their own security health: findings route to them with mapped severity, Security reviews and validates rather than fixes, and each team sees its security health in its own service review.
• Own the wiring and routing of security findings and requests, driving down noise and the human‑decision rate across intake, triage, and review.
• Serve as incident manager of record for security incidents: first escalation for our service‑level commitments, delegated approver for vendor and access decisions, and cover for the Director's operational duties.
• Publish posture: monthly service‑level attainment to engineering, quarterly posture to the executive team, and a risk register that drives priorities.

Job description

LaunchDarkly is seeking a senior security leader to run Product Security and partner with the Director of Security. You’ll shape a risk-led program where engineering owns security health and automation and AI handle first-pass findings.

You will scale this model across the division. You’ll manage a team of security engineers, act as incident manager, approve vendor and access decisions, and cover operations when the Director is unavailable.