Director, Cybersecurity Engineering Lead

What you'll do

• Own the end-to-end software supply chain security strategy including artifact provenance, signing, and verifiable build attestations.
• Secure the build and release path by hardening systems, repositories, and pipelines to enforce trust based on attested evidence.
• Define and implement security models for agentic and AI-assisted workflows, including least-privilege identities and guardrails for machine-generated code.
• Embed automated controls across the delivery lifecycle such as threat modeling, static/dynamic analysis, and infrastructure scanning.
• Translate regulatory and risk requirements into engineered, continuously evidenced guardrails in collaboration with security and audit teams.
• Build, lead, and mentor a team of security engineers while growing a network of security champions.

What we're looking for

• 10+ years in security engineering, platform engineering, or application security including leadership experience in a large, regulated enterprise.
• Deep hands-on understanding of software supply chain security, including build provenance, attestation, artifact signing, and dependency risk.
• Strong command of DevSecOps practices, including CI/CD pipeline security, policy as code, and automated control enforcement at scale.
• Strong cloud-native security expertise across containers, orchestration, serverless, microservices, and APIs with knowledge of zero trust patterns.
• Practical experience securing AI and machine learning workloads or agentic systems, or ability to reason about emerging AI risks.
• Proven track record of influencing engineering organizations and communicating effectively with executive, regulatory, and technical audiences.
• Bachelor’s degree in a related technical field or equivalent practical experience.
• Industry certifications such as CISSP or CCSP (preferred).