Senior Director, Product Security

Docusign brings agreements to life. Over 1.5 million customers and more than a billion people in over 180 countries use Docusign solutions to accelerate the process of doing business and simplify people’s lives. With intelligent agreement management, Docusign unleashes business-critical data that is trapped inside of documents, connecting it to business systems of record to save time, money, and opportunity.

About the role

As the most trusted brand in our industry, Docusign recognizes the profound importance of maintaining and enhancing customer trust in our products. The Senior Director, Product Security leads all aspects of the Docusign Product Security program. This role is a product-focused, technically proficient leadership position managing the development of products and features to ensure the security and trust of the platform.

The Senior Director and their team of security engineers and architects embed within Product, Technology, and Digital Technology teams to manage product development, security controls, and processes. This ensures optimal security by design and default while supporting business objectives. The role integrates leading security practices into all phases of product development—planning, design, implementation, testing, deployment, and maintenance—to proactively reduce vulnerabilities and broader risks.

This position oversees developer technical designs (e.g., secure coding criteria, architectural designs, developer libraries, code reviews), as well as SDLC and CI/CD processes, gating, and execution. The Senior Director implements security practices directly into the software delivery pipeline, ensuring code integrity from development to production, and mitigates risks through automated scanning, testing, and compliance checks at every stage. They leverage emerging tools, like AI guardrails and AI-native tools, to protect against longstanding security risks (e.g., OWASP Top 10) and sophisticated threats (e.g., OWASP Top 10 for Agentic Applications).

The Senior Director leads a robust Security Champions program to scale security awareness, implement secure coding principles, and empower developer-led code reviews and risk mitigation. They collaborate closely with Docusign’s Red Team and PSIRT to proactively identify and remediate vulnerabilities and systemic risks. This role provides deep technical expertise, advises senior leaders, and shapes behaviors across cross-functional teams. This is a people manager role reporting to the Chief Information Security Officer.

Responsibilities

• Manage product security from design through release and maintenance.
• Embed with Product, Technology, and Digital Technology teams to oversee product and developer technical designs; manage SDLC and CI/CD processes, gating, and standards; and ensure Docusign products are secure.
• Maintain deep technical expertise in components/capabilities of the product ecosystem and in security threats, trends, technologies, and industry best practices (existing and emerging).
• Manage efficient, effective security solutions aligned with business needs (e.g., support improvements in automating CI/CD pipelines using infrastructure as code with tools like Terraform and containerization; support secure development of Intelligent Agreement Management and AI capabilities).
• Lead and train a team of security engineers and architects to implement and maintain a high-performing product security program that follows best practices.
• Implement contemporary tooling and automation to optimize insights, efficiency, and efficacy while enhancing technical security rigor.
• Contribute to technical requirements, architectural design and modification, interface design documents, and educational resources.
• Serve as a senior escalation point for complex or high-risk vulnerabilities; drive architectural, process, and implementation improvements from lessons learned.
• Build a high-performing, product-driven team focused on measurable outcomes and continuous improvement; implement tailored program goals, objectives, milestones, key results, and key performance indicators.
• Ensure products meet internal security standards, industry frameworks, and regulatory requirements.
• Serve as a trusted leader/advisor to the CISO, other executives, and teams—translating technical risk into business impact, providing clear updates, trade-offs, and advice.
• Build collaboration and effective relationships with cross-functional teams to ensure frictionless security and paved-path approaches with engineering leadership.

Requirements

• 12+ years in Product Security, Application Security, or closely related security and engineering disciplines, with 8+ years in highly technical leadership roles.
• Bachelor’s degree in computer science, data science, artificial intelligence, machine learning, cybersecurity, risk management, or a related technical field.
• Experience designing and leading product security programs, including technical architecture/secure design reviews, threat modeling, secure coding principles, security tooling and scanning, security champions, SDLC, CI/CD, automating pipelines and gates, vulnerability management, and remediation.
• Experience with common security vulnerabilities (e.g., OWASP Top 10, API Security Top 10, Agentic Top 10, open-source software/supply chain) and their remediations, addressing software risks across products and cross-functional teams.
• Experience with AI security benchmarks such as Xbow, CVE-Bench, Bounty-bench, and the need for AI benchmarks and requirements.
• Experience implementing or improving product security tools (e.g., static and dynamic analysis tools, vulnerability scanning suites) where they previously did not exist or did not perform to expectations.
• Experience implementing or improving product security gates where they previously did not exist or did not perform to expectations.
• Experience embedding security within partner engineering teams through distributed training and enablement programs, such as Security Champions.
• Experience with development and build pipelines and automating CI/CD.
• Experience with cloud infrastructure using infrastructure as code.
• Experience securing AI/ML implementations.
• Experience securely developing APIs and associated tooling against threats like unauthorized access and data compromise.
• Experience with identity verification and cryptography.
• Experience in one or more programming languages relevant to the organization (e.g., C#/.NET Framework/Core, Python, Java, JavaScript).
• Experience defining security KPIs, metrics pipelines, and executive reporting frameworks.

Preferred Qualifications

• Certifications: CISSP, CSSLP, CISM, CCISO, GSLC, CASE, OSWE, or equivalent.
• Substantial experience in AI product security, including AI guardrails, model scanning, agentic development standards, and AI-specific risks (e.g., OWASP Top 10 for Agentic Applications, OWASP Top 10 for LLM Applications).
• Knowledge of AI governance frameworks (e.g., AI RMF, ISO 42001).
• Experience driving automation strategies, predictive analytics, and data-driven insights.
• Former experience as a software developer and/or engineer.
• Master’s degree or higher.
• Deeply technical with strong strategic vision, tactical acumen, and excellence in execution.
• Forward-looking and proactive in addressing current and future threats and business requirements.
• Superb cross-functional collaboration and stakeholder engagement across technical and business relationships, especially with Product, Technology, Digital Technology, Security, and executive teams.
• Growth and product mindset; oriented to action and delivery; professional teammate.

Schedule

Hybrid: Employee divides their time between in-office and remote work. Access to an office location is required. Minimum 2 days per week in-office; frequency may vary by team but will include a weekly in-office expectation.

Pay

Pay for this position is based on geographic location and may vary depending on job-related knowledge, skills, and experience. The following details pay ranges in specific locations:

• California: $244,000.00 - $390,575.00 base salary
• Washington, Maryland, New Jersey, and New York (including NYC metro area): $228,400.00 - $344,575.00 base salary

This role is also eligible for the following bonuses:

• Sales personnel: Variable incentive pay dependent on achievement of pre-established sales goals.
• Non-Sales roles: Company bonus plan calculated as a percentage of eligible wages and dependent on company performance.

This role is eligible to receive Restricted Stock Units (RSUs).

Benefits

• Paid Time Off: Earned time off and paid company holidays based on region.
• Paid Parental Leave: Up to six months off with your child after birth, adoption, or foster care placement.
• Full Health Benefits Plans: Options for 100% employer-paid and minimum employee contribution health plans from day one of employment.
• Retirement Plans: Select retirement and pension programs with potential for employer contributions.
• Learning and Development: Options for coaching, online courses, and education reimbursements.
• Compassionate Care Leave: Paid time off following the loss of a loved one and other life-changing events.