Senior Director, Product Security

Responsibilities

• Define and drive 1Password’s company-wide Product Security strategy focused on proactive risk reduction and secure AI innovation.
• Lead and scale Application Security, Secure SDLC, Data and Device Security, Privacy Engineering, and Security Research programs.
• Manage managers and security professionals, including hiring, coaching, performance feedback, and career development.
• Oversee secure coding, threat modeling, security reviews, code analysis, and security integration into CI/CD pipelines.
• Lead cryptography, cryptographic libraries, secrets management, security libraries, frameworks, vulnerability remediation, and security standards initiatives.
• Mature privacy engineering programs and data management controls across multiple product lines.
• Establish metrics, dashboards, reporting, and other methods to measure program success and risk reduction.
• Represent Product Security in executive and board-level discussions and advise the CISO.
• Oversee research into emerging threats, attack vectors, defensive techniques, and product, application, and ecosystem vulnerabilities.
• Engage with the security research community and publish findings responsibly where appropriate.

Requirements

• 9+ years of progressive experience in security, including at least 5+ years leading security teams or programs at scale.
• Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, or a related field, or equivalent work experience.
• Deep expertise in Application Security, Privacy, and Secure SDLC programs.
• Experience overseeing Security Research activities and engaging with the security research community.
• A strong record of embedding security and privacy into engineering processes and influencing product development.
• Experience leading security teams in high-growth technology or security-focused companies.
• Excellent communication skills with the ability to explain complex security issues to technical and non-technical stakeholders, including executives and boards.
• Experience leading security initiatives that support or incorporate AI capabilities.
• Demonstrated software development experience with Go, Ruby on Rails, shell scripting, Python, or other languages.
• Experience collaborating with internal business and engineering teams, external incident response teams, and research teams.
• Public speaking, open-source contributions, bug bounty engagement, or comparable security-community visibility is a strong plus.

Benefits

• Remote-first work environment within the US or Canada, with travel for offsites, team meetings, customer events, and industry events.
• Health, dental, and other competitive health benefits, with location-specific retirement programs including 401(k) or RRSP options.
• Generous paid time off and maternity and parental leave top-up programs.
• RSU program for most employees and retirement matching program.
• Free 1Password account and paid volunteer days.
• Peer-to-peer recognition through Bonusly.