Director of Engineering, Nexxen
Security
$180-219k
+ Equity
More information about location
3 days a week in office
Video marketing platform
Be an early applicant
Video marketing platform
501-1000 employees
Be an early applicant
$180-219k
+ Equity
More information about location
3 days a week in office
501-1000 employees
Company mission
Nexxen's mission is to empower brands to captivate and activate the audiences that matter most through its end-to-end CTV and video marketing self-serve platform.
Role
Who you are
- 10+ years in Security Engineering with 5+ years leading managers and multi-domain portfolios (SOC/IR, AppSec, Cloud/Infra, Identity)
- Hands-on leadership with:
- AWS multi-account security (Organizations, Control Tower, IAM, SCPs, GuardDuty, Security Hub, Macie, KMS, CloudTrail, Config)
- Kubernetes/EKS, container security, service mesh, ingress, and secrets management (Vault/Secrets Manager)
- Secure SDLC with CI/CD (GitHub/GitLab), Terraform/Terragrunt, OPA/Conftest, SAST/DAST/SCA (CodeQL, Semgrep, Snyk, ZAP/Burp)
- Web/API protections (AWS WAF/Cloudflare), SBOM/signing (Syft/Grype, Cosign/Sigstore), Dependabot/Renovate, Gitleaks
- Endpoint/Network security (Palo Alto/Fortinet, Zscaler/ZTNA, CrowdStrike/SentinelOne, Jamf/Intune)
- Identity/SSO with Azure AD/Entra ID, PIM, Conditional Access, SCIM; Okta or AWS IAM Identity Center
- SIEM/SOAR (Cyrebro; Tines/XSOAR) and threat intel (MISP/OpenCTI); GRC (Drata/Vanta/ServiceNow), Jira/Confluence
- Proven delivery of large-scale security transformations and measurable risk reduction; executive presence and board/audit experience
- Excellent leadership, stakeholder management, and team-building skills
- Strong problem-solving, analytical abilities, and crisp decision-making
- Exceptional communication and interpersonal skills
- Ability to operate under pressure and manage multiple priorities
What the job involves
- Nexxen is seeking a Director of Engineering, Security to own the strategy, delivery, and lifecycle of our security program across applications, cloud/infrastructure, identity, data, and SOC operations
- This role leads secure-by-design practices, incident readiness, and AI security governance while partnering with executives and cross-functional leaders to deliver measurable risk reduction and compliance at scale
- This role leads Security Engineering domains, including Application Security/DevSecOps, Cloud/Infrastructure Security, Identity & Data Security, and Compliance/SOC integration
- The director establishes secure SDLC and architecture guardrails, ensures detection and response effectiveness, governs security vendors and budgets, and drives process transformation
- The role collaborates closely with Engineering/Platform on CI/CD and Kubernetes, with IT for endpoint and access policy enforcement, with Data on protection and lineage, and with Legal/Compliance on SOC 2/SOX/GDPR and AI governance
- Strategy and leadership
- Define a multi-year security strategy and roadmap aligned to Nexxen’s business and product direction
- Chair the Weekly Security Council; represent Security in the Architecture Review Board
- Lead AI Security Council (monthly) and AI Ethics Board (quarterly); deliver bi-monthly executive briefings on risk posture
- Build a high-performing, globally distributed security organization and Security Champions program
- Product, delivery, and value realization
- Drive secure SDLC adoption: threat modeling, secure coding standards, SAST/DAST/SCA, and CI/CD gating
- Prioritize and deliver platform-level controls across identity, cloud/Kubernetes, data protection, and web/API security
- Establish SLAs/SLOs for vulnerability remediation, incident response, and control health; measure MTTR and risk reduction
- Lead build/buy evaluations for security tooling; negotiate, optimize licensing, and manage vendor success
- Architecture and integrations
- Own target-state security architecture for AWS Organizations (multi-account), EKS, and data center environments
- Standardize identity and network segmentation patterns; advance zero-trust and least-privilege access
- Embed policy-as-code (OPA/Conftest/Regula) and supply-chain protections (SBOM, signing, provenance) into pipelines
- Security, risk, and compliance
- Oversee SOC operations, incident response, and threat detection with measurable readiness and tabletop cadence
- Partner with Compliance on SOC 2/SOX/GDPR; ensure audit readiness and timely remediation of findings
- Establish AI governance and risk management for AI-powered products and internal AI tools; manage AI vendor assessments
- People leadership
- Hire, develop, and mentor managers and senior engineers across AppSec, Cloud/Infra, Identity/Data, and Compliance/SOC
- Foster a culture of ownership, enablement, and continuous improvement; scale multi-squad delivery across time zones
- Strengthen stakeholder engagement across Engineering, IT, Data, Product, Legal/Compliance, and executive leadership
- Success metrics (KPIs):
- Delivery: Roadmap attainment, control rollout velocity, and on-time remediation against SLAs
- Reliability/quality: Incident MTTR, alert fidelity, control effectiveness, vulnerability reduction
- Business impact: Risk reduction trends, P1/P0 incident frequency, and developer productivity via secure enablement
- Compliance: Audit readiness, finding closure rates, evidence completeness, and AI governance adherence
- Financials: Tooling ROI, vendor consolidation/TCO optimization, budget accuracy
- Team: Engagement, retention, internal mobility, hiring velocity, cross-region collaboration effectiveness
Our take
Video has been an invaluable marketing tool for businesses since the beginning of TV advertisement, but modern technology has dramatically changed how such content is consumed. On-demand omnichannel streaming services and CTV has provided unique opportunities for advertisers to develop their audience engagement strategies, but without the appropriate technology platform, this can be difficult to navigate.
Nexxen provides an end-to-end self-service CTV & video marketing platform, helping to provide businesses with the appropriate engagement tools to future-proof their video marketing. The platform includes AI-driven analytic tools based on audience data, marketplaces for the self-serving of media for campaigns, in addition to analytic tools to assess the success of campaigns in real-time.
Whilst several other start-ups provide either video engagement tools or self-serve video marketing marketplaces, Nexxen has taken the smart angle of combining both into a single platform, whilst specialising in futureproofing companies for the rise in CTV engagement demands. The company aims to save clients money, time, and operational complexity by unifying where they operate their video advertisement campaigns into a single platform.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
13% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Sep 2011
$37m
LATE VC
Apr 2011
$3.8m
SERIES A
Total funding: $120.2m
Company benefits
- Comprehensive health benefits
- Flexible Time Off policy
- Matching 401k plan
- Commuter Benefits Plan
Company HQ
Theater District, New York, NY
Leadership
Ofer Druker
(CEO)CEO and co-founder of Matomy Group since 2011, and of AdsMarket since 2007.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 13 more jobs at Nexxen