Product Security Leader: Build a World-Class Secure SDLC

Cielo Projects; Boston (MA); On-site; USD 175,000 - 210,000; Full time

Job summary

Velotic is seeking a dynamic Product Security Leader to establish and lead the product security function for a greenfield organization. This role will embed security throughout the SDLC and harmonize practices as two carved-out teams join forces.

You will drive secure development, mentor security champions, and manage vendor relationships with MSSP providers and System Integrators while reporting security metrics to executive leadership.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or related technical field.
• 8+ years of experience in application security, product security, or secure software development, with at least 3 years in a leadership role.
• Proven experience building or scaling product security programs in SaaS, B2B software, or product-focused technology companies.
• Preferred experience leading product security through organizational transitions such as carve-outs, mergers, acquisitions, or multi-entity integrations.
• Deep technical expertise in application security, including secure coding practices and vulnerability management.

Responsibilities

• Build and lead Velotic's product security program from the ground up.
• Develop and implement a unified secure SDLC framework across carved-out entities.
• Oversee the selection, implementation, and management of testing tools and security automation.
• Coordinate product security initiatives with System Integrators and MSSP providers.
• Establish metrics and KPIs to measure program effectiveness and leadership reporting.

Skills

Security leadership

Secure SDLC

Threat modeling

DevSecOps

Vendor management

Education

Bachelor's degree in CS or related field

Master's degree preferred

Tools

SAST tools

DAST tools

SCA tooling

Container scanning

CI/CD tooling

Cloud security tools

Job description

Velotic is seeking a dynamic Product Security Leader to establish and lead the product security function for a greenfield organization. This role will embed security throughout the SDLC and harmonize practices as two carved-out teams join forces.

You will drive secure development, mentor security champions, and manage vendor relationships with MSSP providers and System Integrators while reporting security metrics to executive leadership.