Senior Director, Security Development and Operations

About the role

The Senior Director, Security Development and Operations will provide strategic leadership and oversight of the organization’s integrated security program, encompassing proactive threat management, secure software development practices, incident response, and team development.

Responsibilities

• Lead, mentor, and grow a high-performing team of security practitioners, including engineers, analysts, and architects, fostering a culture of continuous learning and collaboration.
• Provide guidance and hands-on training to elevate team capabilities in penetration testing, incident response, and threat hunting.
• Identify skill gaps, promote professional development, and ensure alignment of security team activities with organizational goals.
• Develop and maintain foundational security controls and solutions, including Endpoint Detection and Response (EDR), SIEM platforms, Email Security systems, and Cloud Security controls.
• Partner with engineering, product, and IT teams to design and maintain a robust Secure SDLC, embedding security controls and checks throughout the development pipeline.
• Oversee the continuous improvement of incident response playbooks and processes, ensuring efficient, repeatable workflows for detecting and addressing security incidents.
• Establish and evolve a formal penetration testing program, ensuring the use of recognized methodologies (e.g., OWASP, PTES) and industry-standard tools.
• Define, implement, and regularly review KPIs and metrics to quantify the effectiveness and maturity of security operations, development practices, and threat management efforts.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field; Master’s degree preferred.
• 12+ years of progressive experience in cybersecurity, including leadership roles overseeing SOC operations, secure development practices, and proactive threat management.
• Demonstrated success in guiding teams through complex security initiatives and maturing security programs.

Skills

• Strong proficiency in both Microsoft Windows and Linux operating systems.
• Ability to write and understand code and scripting languages (e.g., Python, Bash, PowerShell) for automation, tooling integration, and validation of security controls.
• Understanding of common penetration testing methodologies and primary security assessment tools (e.g., Nmap, Metasploit, Burp Suite).
• Knowledge of foundational security controls (EDR, SIEM, Email Security gateways, Cloud Security platforms) and their strategic deployment.
• Familiarity with regulatory frameworks, compliance standards (e.g., NIST CSF 2.0, SOC2), and industry best practices.

Benefits

• Hybrid Work Options
• Award-Winning Culture
• Generous Personal Time Off (PTO) Benefits
• 14-Weeks of 100% Paid Leave for New Parents (Adoption Included)
• Monthly Gym Membership Reimbursement OR Gym Equipment Reimbursement
• Benefits Eligibility Effective Day One
• 401K with Employer Match
• Tuition Reimbursement After One Year of Service
• Fertility Assistance Program
• Four-Week Company-Paid Sabbatical Eligibility After Five Years of Service