Sr. Director, Product Security & Engineering

We are seeking a Senior Director of Product Security & Engineering to lead and scale our product security, PSIRT, and product integrity capabilities across a modern, cloud-native, and AI-enabled technology platform. This leader works directly with Product and Engineering leadership to embed security while ensuring our products remain resilient against real‑world adversaries, abuse, and emerging AI‑driven threats. Product Security Leadership & Engineering Partnership Define and translate security requirements into practical, scalable engineering or product roadmap guidance across our Digital Banking products and services. Champion embedded security‑by‑design in product architecture, secure coding practices, CI/CD pipelines, and cloud‑native platforms. Partner with engineering leadership to drive DevSecOps adoption and measurable security outcomes. Product Security Incident Response & PSIRT Own and mature the Product Security Incident Response Team (PSIRT) function. Lead vulnerability intake, triage, remediation, and coordinated disclosure processes. Work with infrastructure to evolve emergency patch/config release process. Drive post‑incident learning through root‑cause analysis and systemic improvements. Partner with Legal, Communications, and Customer teams during high‑impact security events. Product Integrity, Abuse & Threat Modeling Ensure products are resilient against business logic abuse, misuse, fraud, and adversarial behavior. Lead threat modeling for new products, features, and AI‑enabled capabilities. Collaborate with Fraud, Risk, and Trust teams to address cross‑functional threats. Champion secure architecture reviews at design and pre‑launch phases. AI & Agentic AI Security Governance Partner with architecture to oversee security standards and defense response program for AI and agentic AI systems. Ensure secure model development, deployment, and inference pipelines. Address AI‑specific risks including prompt injection, jailbreaks, training data poisoning, leakage, model extraction, inversion, and agent autonomy. Lead AI red‑teaming and adversarial testing efforts. Align AI security practices with emerging regulatory and risk frameworks. Security Operations & Engineering Enablement Provide oversight and technical leadership across Application Security, SOC and detection engineering, red/blue/purple team programs, and penetration testing. Ensure logging, monitoring, and telemetry are fully integrated into engineering workflows. Drive automation and scalability across security operations. Eligibility & Hiring Criteria Bachelor's degree in Cyber Security or Computer Science and a minimum of 15 years of related experience; or an advanced degree with 12+ years of experience; or equivalent relevant work experience. 7+ years of managing and developing employees. Experience scaling software engineering, cloud architecture, or infrastructure engineering teams in highly available environments. Experience in regulated industries (financial services, fintech, payments, or similar) preferred; familiarity with regulatory expectations and audits related to security and risk. Proven ability to lead senior technical teams and cross‑functional initiatives. Strong communication skills across engineers, executives, auditors, regulators, and customers. Certifications such as CISSP, CISM, or cloud security certifications are a plus. Fluent written and oral communication in English. Authorized to work in the U.S.; we are unable to sponsor or take over sponsorship of an employment Visa at this time. Benefits & Work Environment Health & Wellness (including competitive health insurance offerings and generous paid parental leave for eligible new parents). Hybrid Work Opportunities. Flexible Time Off. Career Development & Mentoring Programs. Community Volunteering & Company Philanthropy Programs. Employee Peer Recognition Programs – “You Earned it”. Equal Opportunity Employer Q2 is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, or veteran status. Applicants in California or Washington State may not be exempt from federal and state overtime requirements. #J-18808-Ljbffr