VP, Product Security & Secure-by-Design Leadership

Blue Shield of CA; Seattle (WA); On-site; USD 260,000 - 400,000; Full time

Job summary

Stellarus is seeking an accomplished VP of Product Security to define and drive the enterprise security strategy across its commercial products, platforms, and services. You will partner with Product, Engineering, Risk, Privacy, Compliance and Legal to build secure-by-design capabilities at scale.

This executive leader will oversee product security engineering, application security, cloud security, DevSecOps, vulnerability management, security architecture, and governance programs, ensuring

Qualifications

• Bachelor's degree in Computer Science, Engineering, or a related technical field or 18+ years of relevant experience.
• 12+ years of relevant experience in information security, cybersecurity, product security, application security, cloud security, software engineering security, or related disciplines.
• 7+ years of leadership experience leading managers and/or large-scale security organizations.
• At least one industry standard certification e.g., CISSP, CISM or CCSP
• Proven executive leadership experience developing and scaling enterprise Product Security programs in complex, highly regulated environments.
• Deep expertise in secure software development lifecycle (SSDLC), application security, DevSecOps, cloud security, API security, and software supply chain security.
• Strong understanding of modern cloud platforms, microservices architectures, containerized environments, and platform engineering practices.
• Experience implementing and operationalizing security frameworks and standards such as NIST CSF, NIST SSDF, ISO 27001, CIS Controls, SOC 2, and OWASP.
• Demonstrated success integrating security into agile and product-centric operating models.
• Strong knowledge of threat modeling, vulnerability management, penetration testing, code analysis, and secure architecture review methodologies.
• Experience managing security risks associated with customer-facing products, digital platforms, APIs, and cloud-native applications.
• Proven ability to translate business strategy into actionable security roadmaps, investment plans, and measurable outcomes.
• Strong financial and operational acumen, including experience managing budgets, prioritizing investments, and optimizing organizational performance.
• Excellent communication, stakeholder management, and executive presentation skills with the ability to influence technical and non-technical audiences.
• Experience collaborating with executive leadership, boards, customers, regulators, and external auditors.

Responsibilities

• Establish and lead the enterprise product security strategy, governance framework, and operating model.
• Oversee product security engineering, application security, cloud security, DevSecOps, vulnerability management, security architecture, and product security governance programs.
• Collaborate with executive leadership and regulators to align security with business goals.

Skills

Security leadership

SSDLC

DevSecOps

Cloud security

Threat modeling

Vulnerability management

Executive communication

Budget management

Stakeholder management

Regulatory frameworks

APIs and cloud-native security

Program management

Education

Bachelor's degree in Computer Science, Engineering, or a related technical field

18+ years of relevant experience in lieu of a degree

Job description

Stellarus is seeking an accomplished VP of Product Security to define and drive the enterprise security strategy across its commercial products, platforms, and services. You will partner with Product, Engineering, Risk, Privacy, Compliance and Legal to build secure-by-design capabilities at scale.

This executive leader will oversee product security engineering, application security, cloud security, DevSecOps, vulnerability management, security architecture, and governance programs, ensuring