Director of Security Engineering, ConductorOne

• 10+ years in security engineering, application security, or infrastructure security, with 5+ years leading security teams
• Deep experience securing SaaS platforms, ideally in the identity, security, or enterprise software space
• A builder's mindset: you're excited to create security programs and tooling from the ground up, not just maintain them
• Strong technical foundation in cloud security (AWS), container security, and modern application architectures
• Hands-on experience with security tools and practices: SAST/DAST, vulnerability management, SIEM, incident response, and penetration testing
• Track record of building and scaling high-performing security teams
• Experience with compliance frameworks (SOC 2, ISO 27001, FedRAMP) and customer security assessments
• Excellent communication skills—able to translate security concepts for technical and non-technical audiences

Desirable

• We're looking for a Director of Security Engineering to lead and scale our security engineering function
• In this role, you'll own the security posture of ConductorOne's platform and infrastructure, ensuring our customers can trust us with their most sensitive identity data
• You'll build and lead a high-performing team, set technical direction for security initiatives, and partner across the organization to embed security into everything we build
• This is a high-impact leadership role at a company where security is the product
• You'll work closely with engineering, product, and go-to-market teams to ensure we practice what we preach
• Lead the Security Engineering Team:
• Build, mentor, and develop a team of security engineers focused on product security, infrastructure security, and security operations
• Foster a culture of ownership, continuous improvement, and collaboration
• Set clear goals and create professional development paths for your team
• Define and Execute Security Strategy
• Develop and implement a comprehensive security engineering roadmap aligned with company objectives and customer commitments
• Own ConductorOne's security architecture across cloud infrastructure, applications, and data systems
• Drive security reviews, threat modeling, and secure design practices across the engineering organization
• Secure the Platform:
• Ensure the security and integrity of our AI-native identity platform, including protection of customer data and identities
• Lead vulnerability management, penetration testing, and incident response capabilities
• Partner with engineering teams to integrate security into CI/CD pipelines and the software development lifecycle
• Serve as the technical lead for security audits, customer security assessments, and regulatory inquiries
• Partner Across the Organization:
• Collaborate with Product and Engineering leadership to balance security requirements with velocity
• Support Sales and Customer Success with security expertise during customer engagements
• Report on security posture, risks, and initiatives to executive leadership