Role Overview
- Define and drive Product Security strategy focusing on security assurance, risk reduction, AI innovation, and maintaining security posture.
- Lead and scale security teams and programs as a strategic partner to CISO and executive leadership.
Strategic Leadership & Security as a Business
- Define and evolve long-term Product Security strategy aligned with business goals.
- Own creation and execution of Product Security roadmap including security features, SDLC enhancements, and risk reduction milestones.
- Manage Product Security budget including forecasting and vendor contracts.
- Define, track, and report KPIs and security metrics providing data-driven insights to leadership.
- Conduct impact analysis and translate security risks into business risk terms.
People & Program Leadership
- Lead and mentor Security Engineers and Analysts providing career development and feedback.
- Define and execute goals focusing on secure AI development globally.
- Engage in the security industry as a thought leader through talks, publications, and forums.
Cloud Security (CloudSec) and Infrastructure
- Define security architecture and strategy for cloud environments (GCP, AWS, Azure).
- Lead implementation of security controls for containerized applications focusing on Kubernetes clusters.
- Implement security guardrails for Infrastructure as Code like Terraform.
Application Security (AppSec) & Secure SDLC
- Partner with Engineering and Product leadership to embed security processes into SDLC.
- Develop and oversee secure coding practices, architecture reviews, and code analysis.
- Direct vulnerability management and penetration testing programs ensuring prioritized remediation.
Data Security, AI/ML Model Security, & Cryptography
- Lead data security program focusing on protection, encryption, and access controls for sensitive patient data.
- Establish security engineering practices for AI/ML models including model integrity and adversarial attack prevention.
Requirements
- 10+ years progressive security experience including senior leadership of security teams and programs.
- Experience managing security as a business unit with budget and strategic forecasting.
- Engineering proficiency in one or more general-purpose programming languages; Python and NextJS a plus.
- Deep expertise securing major cloud platforms and knowledge of modern cloud security tools.
- Mandatory expertise securing Kubernetes and container orchestration technologies.
- Proven experience securing enterprise SaaS and cloud products handling PHI with knowledge of relevant security regulations and frameworks.
- Exceptional communication and presentation skills to convey complex security issues to technical and non-technical audiences.
