Senior Director, Product Security

Workato

2mo ago

Job
Full-time
Senior & Expert Level
IT & Cybersecurity
Mountain View
Quick Apply

AI generated summary

You must have 7+ years of product security experience, deep knowledge of security technologies, compliance frameworks, and security principles, with strong leadership and communication skills.
You will lead a team in developing and implementing product security programs, policies, and controls. Drive continuous improvement, oversight of cybersecurity areas, incident response, and compliance with industry standards. Conduct security assessments, reviews, and testing.

Requirements

Qualifications / Experience / Technical Skills:
Minimum of 7 years of experience in product security, application security, or a related field.
Hands-on experience designing and deploying security controls across all security domains, such as access management, data protection, vulnerability management, incident response and management, application security, network security, preventive, detective, and offensive security solutions.
Deep understanding of security principles, techniques, and technologies such as OWASP Top 10, SANS Top 25, encryption, identity and access management, network security, and cloud security.
Familiarity with compliance frameworks and standards such as ISO 27001, SOC 2, GDPR, and CCPA.
An understanding of Application Security threats and countermeasures
Practical knowledge of security technologies, especially those applying to SaaS Web applications and wider business solutions, including Firewalls, IDS/IPS, Identity and access management, SIEM, Data Loss Protection, BCP, and Cloud Security
Ability to provide strategic product security mentorship based on experience performing threat modeling and design reviews to assess security implications and requirements
Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
Relevant security certifications (e.g., CISSP, OSCP, CEH) are a plus.
Soft Skills / Personal Characteristics:
Outstanding interpersonal and communication skills; ability to communicate information successfully internally and externally and to drive multi-functional alignment and action
Excellent people leadership skills - providing direction, monitoring performance, motivating staff, and building a positive working environment

Responsibilities

Lead the company's development and implementation of a comprehensive product security strategy.
As a hands-on leader, manage and mentor a team of security engineers and analysts, providing guidance and direction for their professional growth.
Identify, develop, implement, and maintain security programs and processes across product development and production environments.
Define strategic direction, set objectives, and structure and resource the organization and the work in a way that improves the team's impact and provides a paved path to a leadership position among SaaS providers, including application security, infrastructure security, and data security.
Oversee critical cybersecurity areas, including incident response, disaster recovery, awareness, monitoring, remediation, information governance, and digital security.
Lead all product security operations that protect against immediate threats and respond when something goes wrong.
Grow the product security programs and capabilities to an industry-leading position, finding opportunities to improve our existing approach and helping to guide the team to unlock that potential.
Build strong relationships within the product, engineering and operations teams to implement the appropriate security controls to protect Workato’s applications, infrastructure, and data.
Communicate effectively with stakeholders at all levels about the security posture of products and the importance of product security.
Develop and oversee the development and enforcement of security policies and procedures based on industry-standard best practices.
Partner closely with executive leadership to ensure that all applications and platforms are developed with security in mind and that appropriate security controls have been implemented while driving continuous investment into the cybersecurity areas.
Utilize business-relevant metrics to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation and increase the security program's maturity.
Work closely with internal stakeholders and business units to keep abreast of planned changes to technologies, working practices, and business activities that could impact the organization’s Information Security or risk profile.
Support continued compliance with SOC2, HIPAA and other currently required standards and act as Product and Engineering technical lead within product security to expand certifications to include PCI, NIST800-171, ISO27001/277001, and FedRAMP. Ensure operation of related controls. Coordinate the provision of required evidence for audit.
Lead incident response activities and post-mortem analysis for any security breaches or incidents, liaising with the Legal, Security and Privacy teams on data protection, ensuring root causes of such breaches are understood and addressed.
Conduct hands-on security assessments, code reviews, and penetration testing to identify product vulnerabilities and security gaps as needed.
Leverage Workato as an automation solution for SOAR, GRC and other security-related use cases

FAQs

What are the responsibilities of the Senior Director, Product Security?

The Senior Director of Product Security is responsible for establishing and leading a global security team focused on product and infrastructure security at Workato. This includes leading the product security efforts across the entire product line and ensuring secure coding practices, security architecture, and application security.

What qualifications are required for the Senior Director, Product Security position?

The ideal candidate for the Senior Director of Product Security position should have a proven track record of hands-on security work and theoretical knowledge in various aspects of software security. They should also have experience in leading a team of security professionals and be well-versed in application security, cloud security, and security architecture.

What skills are important for the Senior Director, Product Security role?

Important skills for the Senior Director of Product Security role include strong leadership abilities, hands-on experience in software security, knowledge of secure coding practices, and expertise in security architecture. Additionally, the candidate should have excellent communication skills and the ability to work collaboratively with cross-functional teams.

What is the goal of the global security team led by the Senior Director, Product Security?

The goal of the global security team led by the Senior Director of Product Security is to ensure the security of Workato's product and infrastructure. This includes implementing best practices in product security, staying up-to-date on the latest security trends, and working proactively to prevent security breaches and vulnerabilities.

Workato

One platform for intelligent integration & workflow automation across your organization.

Technology

Industry

501-1000

Employees

2013

Founded Year

Mission & Purpose

Workato makes the creation and implementation of automations 10X faster than traditional platforms. As the leader in AI-powered enterprise automation, we enable enterprises to automate their business processes across the organization by integrating their applications, data, and experiences. Designed with best-in-class security and governance, scalability, performance, and availability, our low-code, no-code platform makes it easy for IT and business teams to integrate their applications and automate their processes, drawing from thousands of automation “recipes” built by the Workato community. With our democratized approach to automation and integration, business technologists are empowered to fuel their organization’s digital transformation. Workato is trusted by over 17,000 of the world's top brands, including Broadcom, Intuit, and Box.