VP of Product Security & Secure-by-Design

Blue Shield of CA; Los Angeles (CA); On-site; USD 230,000 - 300,000; Full time

Job summary

Stellarus is seeking a Vice President of Product Security to establish and lead the enterprise security strategy across its commercial products, platforms, and services. You will partner with Product, Engineering, Risk, Privacy, Compliance, and Legal leaders to scale secure-by-design capabilities, protect customer data, and enable growth.

You will oversee product security engineering, application security, cloud security, DevSecOps, vulnerability management, security architecture, and governance

Qualifications

• Bachelor's degree in Computer Science, Engineering, or related technical field; or 18+ years of relevant experience.
• 12+ years of information security, cybersecurity, product security, or related disciplines with enterprise-scale leadership.
• 7+ years of leadership experience building and scaling security teams.

Responsibilities

• Lead enterprise Product Security programs across complex, regulated environments.
• Oversight of security engineering, application security, cloud security, and DevSecOps programs.
• Translate business strategy into actionable security roadmaps and measurable outcomes.

Skills

Security leadership

SSDLC

DevSecOps

Cloud security

Threat modeling

Vulnerability management

Executive communication

Budget management

Regulatory compliance

APIs security

Software supply chain

Executive stakeholder management

Education

Bachelor's degree in Computer Science/Engineering or related field

18+ years of relevant experience in lieu of degree

Job description

Stellarus is seeking a Vice President of Product Security to establish and lead the enterprise security strategy across its commercial products, platforms, and services. You will partner with Product, Engineering, Risk, Privacy, Compliance, and Legal leaders to scale secure-by-design capabilities, protect customer data, and enable growth.

You will oversee product security engineering, application security, cloud security, DevSecOps, vulnerability management, security architecture, and governance