Director Security Engineering, Miro
+ Equity
2-5 days a week in office
Visual workspace for innovation.
Posted today
Visual workspace for innovation.
1001+ employees
Posted today
+ Equity
2-5 days a week in office
1001+ employees
Company mission
To empower teams to create the next big thing.
Role
Who you are
- 10+ years of experience in information security, with a strong focus on software and product security
- 5+ years of leadership experience in a security function, with a proven track record of building and mentoring high-performing teams
- Deep expertise in Secure Software Development Lifecycles (SSDLC), including integrating security into agile and custom development frameworks
- Extensive experience with threat modeling methodologies (e.g., STRIDE, PASTA) and risk assessment, particularly within a SaaS or product-centric organization
- Strong knowledge of cloud security principles and experience securing applications in major cloud environments (AWS, GCP, or Azure)
- Familiarity with modern application architecture, including microservices, APIs, and containerization (Docker, Kubernetes)
- Solid understanding of relevant compliance and regulatory frameworks such as GDPR, SOC 2, ISO 27001, and emerging AI regulations
- A Strategic Leader: You think holistically, balancing security requirements with business objectives and product velocity
- An Exceptional Communicator: You can articulate complex technical risks to non-technical stakeholders and translate business goals into security strategy for your team
- A Natural Collaborator: You excel at building strong relationships and influencing cross-functional teams without direct authority
- A Pragmatic Problem-Solver: You are skilled at identifying scalable, risk-based solutions and are comfortable navigating ambiguity in a fast-paced environment
- Data-Driven: You use metrics and KPIs to measure the effectiveness of your programs and drive continuous improvement
- A Passionate Mentor: You are dedicated to developing talent and empowering engineers and product managers to be security champions
What the job involves
- The Head of Product Security is responsible for defining and managing Miro’s product security strategy, with a primary focus on embedding security, privacy, and abuse-prevention practices throughout the Product Development Life Cycle (PDLC)—spanning the Discover, Define, and Deliver phases
- The PDLC is embedded within Miro’s AMPED Ways of Working (WoW) and AMPED Operating Model, and this role ensures that product teams apply consistent security considerations as part of how products are scoped, shaped, and shipped
- The position includes responsibility for enabling product teams to identify and mitigate both technical risks and misuse scenarios, where legitimate product functionality could be abused for malicious purposes (e.g., phishing, data leakage, account enumeration)
- The Head of Product Security sets expectations for risk ownership and ensures that non-functional security requirements are integrated into product delivery frameworks
- This role reports directly to the Chief Information Security Officer (CISO) and collaborates closely with Product, Engineering, Application Security, Privacy, Legal, and Compliance functions
- Define and maintain a product security governance framework aligned with the Discover, Define, Deliver phases of the PDLC, as structured within the AMPED Ways of Working and Operating Model
- Establish clear ownership models assigning product managers accountability for identifying, documenting, and mitigating security and abuse risks
- Lead the development of security guidance, policy, and review processes tailored to each PDLC phase within the AMPED framework
- Implement methods for identifying both traditional vulnerabilities and abuse of functionality, where users exploit legitimate features for malicious purposes
- Specify non-functional security requirements to be considered in product requirements, architecture, and delivery checkpoints
- Collaborate with Product teams to incorporate threat modeling, misuse case analysis, and privacy risk assessments into the Discover and Define stages
- Coordinate with Application Security to ensure alignment of secure software development practices with broader product strategy and roadmaps
- Maintain tooling, documentation, and checklists to support structured product security reviews and approvals
- Integrate compliance, privacy, and regulatory requirements (e.g., GDPR, DSA, AI Act) into product planning and delivery processes
- Develop and deliver education programs to raise awareness of product misuse risks and the responsibility of product teams to mitigate them
- Participate in product strategy reviews, roadmap reviews, and high-risk feature assessments, providing security input and risk-based recommendations
- Define and report on product security KPIs and maturity metrics aligned with AMPED governance forums and risk review processes
- Act as a point of contact for internal audit, security certifications, and external customer assurance related to product-level security risks
- Drive continuous improvement in security integration by incorporating learnings from incidents, threat intelligence, and peer benchmarks into the PDLC
- Ensure alignment of all product security activities with Miro’s AMPED cross-functional execution model, enabling scalable and repeatable secure product development practices
- The primary objective of the Head of Product Security role is to prevent security breaches, feature abuse, and compliance non-conformities that could result in financial loss, reputational damage, or failure to achieve Miro’s business objectives by ensuring that security, privacy, compliance, and misuse risks are systematically identified and mitigated throughout the Product Development Life Cycle—integrated into Miro’s AMPED (Analytics & Marketing & Product & Engineering & Design) Ways of Working and Operating Model
- The role enables secure and compliant product development to support the successful delivery of Miro's business objectives
Application process
- 01. Recruiter Screen
- A 30-min interview to discuss your relevant skills, perspective on resilience, experience, and what motivates you to join Miro
- 02. Hiring Manager
- The hiring manager will meet to discuss your experience and fit for the role by assessing whether you align with the Miro Mindset (Curiosity, Drive, Resilience, Empathy, Cognitive Agility & Accountability). This interview usually takes 90-120 minutes
- 03. Skill Assesment
- An interactive presentation to see your skills in action, based around a particular case study or business problem
- 04. Meet the Team
- Here you will meet cross-functional stakeholders, and we will ask evidence-based questions to evaluate how well you align with the role and Miro's values and culture
- 05. Leadership Round
- Meet a member of the leadership team to discuss Miro’s company values and share your vision for success at Miro
Our take
Millions of employees worldwide have moved to remote working, but existing tools are holding back the potential for collaboration. Tools such as Zoom and Microsoft Teams already provide remote communication platforms to millions of users, but they generally compromise on features required to emulate the team collaboration experience.
Miro has created a platform that provides enterprise tools such as collaborative whiteboards and mind-map software into an accessible and integrated service. As opposed to providing an 'all-in-one' add on, Miro allows businesses to customize and integrate the tools and resources within their individual platform to cater to the team's specific requirements.
Miro’s initial strategy of offering free and discounted subscriptions and then moving to paid models has paid off. The platform currently has over 35 million users and is trusted by enterprises such as VMware, Zendesk and Frog. As part of its ongoing battle with Zoom, Miro acquired video-chat startup Around in 2022, to remain competitive in the market.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
15% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Jan 2022
$400m
SERIES C
Apr 2020
$50m
SERIES B
Total funding: $476.8m
Company benefits
- Medical Insurance coverage
- Being in a collaborative workspace with passionate, driven colleagues
- Working with some of the most creative high-tech talent
- Learning outstanding sales skills that will take your career to another level
- Being part of a culture of learning & development for professional growth
Company HQ
The East Cut, San Francisco, CA
Leadership
Andrey Khusid
(CEO)Prior to Miro, they founded Vitamin Group specialising in digital technologies and multimedia projects.
Oleg Shardin
(Board Member)They have a Master's degree in Strategic Management. They founded the Vitamin Group in 2005 prior to founding Miro. Initially served as COO for Miro.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 47 more jobs at Miro