Director of Product Security, Workato
$200-215k
+ Equity
Office located in Palo Alto, CA
Integration & workflow automation platform
Open for applications
Integration & workflow automation platform
501-1000 employees
Open for applications
$200-215k
+ Equity
Office located in Palo Alto, CA
501-1000 employees
Company mission
To help businesses streamline their operations by providing a platform to automate their work and integrate their stacks, all in one place.
Role
Who you are
- Minimum of 4 years of experience leading a team in product security, application security, or a related field
- Hands-on experience designing and deploying security controls across all security domains, such as access management, data protection, vulnerability management, incident response and management, application security, network security, preventive, detective, and offensive security solutions
- Deep understanding of security principles, techniques, and technologies such as OWASP Top 10, SANS Top 25, encryption, identity and access management, network security, and cloud security
- Familiarity with compliance frameworks and standards such as ISO 27001, SOC 2, GDPR, and CCPA
- An understanding of Application Security threats and countermeasures
- Practical knowledge of security technologies, especially those applying to SaaS Web applications and wider business solutions, including Firewalls, IDS/IPS, Identity and access management, SIEM, Data Loss Protection, BCP, and Cloud Security
- Ability to provide strategic product security mentorship based on experience performing threat modeling and design reviews to assess security implications and requirements
- Bachelor's or Master's degree in Computer Science, Information Security, or a related field
- Relevant security certifications (e.g., CISSP, OSCP, CEH) are a plus
- Outstanding interpersonal and communication skills; ability to communicate information successfully internally and externally and to drive multi-functional alignment and action
- Excellent people leadership skills - providing direction, monitoring performance, motivating staff, and building a positive working environment
- The ideal candidate will have a proven track record of hands-on security work and the ability to lead a team of security professionals
What the job involves
- Team responsible for Workato’s product and infrastructure security
- The Director of Product Security is a hands-on leader responsible for leading the product security efforts across our entire product line
- This role requires a unique blend of real-world experience and theoretical knowledge in various aspects of software security, including but not limited to application security, cloud security, secure coding practices, and security architecture
- Lead the company's development and implementation of a comprehensive product security strategy
- As a hands-on leader, manage and mentor a team of security engineers and analysts, providing guidance and direction for their professional growth
- Identify, develop, implement, and maintain security programs and processes across product development and production environments
- Define strategic direction, set objectives, and structure and resource the organization and the work in a way that improves the team's impact and provides a paved path to a leadership position among SaaS providers, including application security, infrastructure security, and data security
- Oversee critical cybersecurity areas, including incident response, disaster recovery, awareness, monitoring, remediation, information governance, and digital security
- Lead all product security operations that protect against immediate threats and respond when something goes wrong
- Grow the product security programs and capabilities to an industry-leading position, finding opportunities to improve our existing approach and helping to guide the team to unlock that potential
- Build strong relationships within the product, engineering and operations teams to implement the appropriate security controls to protect Workato’s applications, infrastructure, and data
- Communicate effectively with stakeholders at all levels about the security posture of products and the importance of product security
- Develop and oversee the development and enforcement of security policies and procedures based on industry-standard best practices
- Partner closely with executive leadership to ensure that all applications and platforms are developed with security in mind and that appropriate security controls have been implemented while driving continuous investment into the cybersecurity areas
- Utilize business-relevant metrics to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation and increase the security program's maturity
- Work closely with internal stakeholders and business units to keep abreast of planned changes to technologies, working practices, and business activities that could impact the organization’s Information Security or risk profile
- Support continued compliance with SOC2, HIPAA and other currently required standards and act as Product and Engineering technical lead within product security to expand certifications to include PCI, NIST800-171, ISO27001/277001, and FedRAMP. Ensure operation of related controls. Coordinate the provision of required evidence for audit
- Lead incident response activities and post-mortem analysis for any security breaches or incidents, liaising with the Legal, Security and Privacy teams on data protection, ensuring root causes of such breaches are understood and addressed
- Conduct hands-on security assessments, code reviews, and penetration testing to identify product vulnerabilities and security gaps as needed
- Leverage Workato as an automation solution for SOAR, GRC and other security-related use cases
Our take
Many businesses struggle with lack of team integration. There are a plethora of handy apps available, and various teams within businesses often use different processes, tools, and software. This has led to many businesses attempting to patch together technologies and create ad-hoc solutions that fail when they need to be scaled. Workato allows businesses to integrate data and apps so that teams can collaborate and communicate securely.
Workato has built a single platform that integrates apps, processes, data, and user experiences to improve efficiency, communication, and business flexibility. There are many integration platforms available, such as SnapLogic and Mulesoft Anypoint Platform, however, Workato has aimed its platform at users who have minimal technical experience, rather than the IT team.
Workato has continued to expand its partnerships and workforce, and is well set to see further growth as it innovates its product offerings and capabilities. The company was recognized as a Leader in the 2023 Gartner® Magic Quadrant™ for Integration Platform as a Service, making five years it has participated and five years it has been recognized.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Nov 2021
$200m
SERIES E
Jan 2021
$110m
SERIES D
Total funding: $415m
Company benefits
- Flexible Working Arrangements: We maintain a hybrid remote work model and provide everyone with best of breed technology tools that enable them to work anywhere, anytime.
- Great Employee Benefits: Such as an Employee Assistance Programme (EAP), Health Insurance, Referral Bonuses, and Workato Stock Options, tailored to the countries that our employees are based in.
- Professional Development Opportunities: We support individual career ambitions, and set aside training programs and budgets they can tap on to upgrade both soft and hard skills.
- Dedicated Wellness: We make it a point to dedicate time to pause, recharge and get to know each other better.
- Recreation Time: From virtual game nights to fitness sessions, there's always time for a little fun on the calendars.
Company values
- Prioritize customers: We exist for our customers and because of them. That’s why we are passionate about delivering an amazing product, excellent service, and an unforgettable experience.
- Win together: We strive to hire people who understand team wins come above their own. We respect and trust our colleagues — believing that the greatest success comes not from one person, but from all of our strengths combined.
- Act now: The best time to do anything worth doing is now. Create a minimal viable solution fast and iterate quickly. We encourage failing fast so we can succeed faster.
- Think ahead: We skip the easy shortcuts for mediocre and temporary solves. It’s important to always take the hard road now if it will lead to a better long term solution.
- Better each other: You cannot get 1% better every day unless people are honest with you and you openly invite that coaching and guidance. Provide feedback in private. Encourage and support in public.
- Go offbeat: We use novel thinking to create novel solutions. We do not use others’ thinking as a template. We mix existing wisdom with unusual thinking to generate new and better solutions.
- Have fun: We take care of ourselves, and give everyone the space they need to feel healthy, happy, and well-rested. Because it’s only when we’re having a good time that we’re able to ensure our customers are, too.
Company HQ
Old Mountain View, Mountain View, CA
Articles
Leadership
Vijay Tella
(CEO)Spent 15 years as an Engineer at Teknekron and TIBCO, before joining Oracle as CSO. They also served as CEO at Qik, and VP at Skype.
Gautham Viswanathan
(CPO)Spent 12 years at TIBCO Software, before leaving their Corporate Development role to found Blink Interactive. Also served as the CEO of iProfile.
Harish Shetty
(Head of Engineering)Previously held leadership roles in engineering at TIBCO, Blink, and iProfile.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 33 more jobs at Workato