Senior Security TPM - Lead Shift-Left, Secure by Design

Docusign; Seattle (WA); Hybrid; USD 146,000 - 207,000; Full time

Benefits offered by this job

RSUs

Health benefits

Paid time off

Job summary

Docusign is seeking a Senior TPM in Product Security to shape and execute the long-term strategy for secure development across products. You will lead shift-left initiatives, build scalable programs, and partner with executives to align security with business goals.

This is a hybrid role based in Washington, with in-office and remote work expectations. You will drive secure coding adoption, threat modeling, and vulnerability management, while guiding engineering teams to move fast without

Qualifications

• 8+ years related experience with a Bachelor's degree or 6 years related experience with a Master's degree
• Bachelor's or Master's degree in Technology or Computer Science or Cybersecurity
• Experience with product security practices (secure SDLC, threat modeling, vulnerability management, cloud/application security)
• Experience with security frameworks and standards (e.g., OWASP, NIST, ISO 27001)
• Experience leading large, cross-functional security or engineering programs
• Experience with program planning, prioritization, and driving accountability across teams
• Experience with threat modeling, risk management, and vulnerability management
• Preferred hands-on experience enabling shift-left security practices in product development
• Proven ability to build and scale Security Champions or developer enablement programs
• Familiarity with regulatory and compliance frameworks (SOC 2, ISO 27001, GDPR FedRAMP, etc.)
• Experience working with product and engineering teams in an Agile environment
• Familiarity with DevSecOps practices and security automation
• Experience with security automation tools integrated into CI/CD pipelines
• Track record of leading cultural change to foster security-first engineering practices
• Relevant certifications (e.g., CISSP, CISM)
• Excellent executive communication and stakeholder management skills
• Experience with cloud security (AWS, Azure, GCP)

Responsibilities

• Own and scale product security initiatives that span across engineering organizations, balancing risk reduction with innovation
• Drive adoption of secure coding, automated security tooling, and early threat modeling across the SDLC
• Partner with senior engineering and product leaders to embed security into decision-making, roadmaps, and design principles
• Translate technical risk into business impact, providing clear updates, trade-off discussions, and recommendations to executives
• Lead organizational change by fostering a developer-first security culture that scales across teams and geographies
• Ensure products meet internal security standards, industry frameworks, and regulatory requirements
• Define measurable success criteria (e.g., secure coding adoption rates, vulnerability SLAs) and report outcomes to leadership
• Ensure coordinated response and remediation for vulnerabilities, leveraging learnings to continuously strengthen processes
• Improve security processes, tools, and automation to scale security across the organization

Skills

secure SDLC

threat modeling

vulnerability management

cloud security

security automation

security frameworks

Education

Bachelor's degree in Technology or Computer Science or Cybersecurity

Master's degree in Technology or Computer Science or Cybersecurity

Tools

OWASP

NIST

ISO 27001

Job description

Docusign is seeking a Senior TPM in Product Security to shape and execute the long-term strategy for secure development across products. You will lead shift-left initiatives, build scalable programs, and partner with executives to align security with business goals.

This is a hybrid role based in Washington, with in-office and remote work expectations. You will drive secure coding adoption, threat modeling, and vulnerability management, while guiding engineering teams to move fast without