Head of Security Engineering

Company DescriptionDigital Harbor is an innovation-driven company committed to reshaping the future of enterprise applications. By creating cutting-edge cloud solutions, we empower business users to work collaboratively, enhance productivity, and optimize time management. Our innovative technologies are trusted by governments worldwide to drive growth and efficiency in the enterprise sector.All the relevant skills, qualifications and experience that a successful applicant will need are listed in the following description.At Digital Harbor, we provide a platform for individuals who embrace innovation, move quickly, and help modernize how organizations build and operate enterprise software.Position SummaryDigital Harbor is seeking a highly hands-on Head of Security Engineering to lead and evolve the company's security engineering function across our SaaS platform, cloud infrastructure, and internal operations.This role serves as the senior-most dedicated security leader within the organization and is responsible for executing the company's security strategy while partnering closely with Engineering, Product, DevOps, Legal, and Operations.We are not seeking a traditional governance-heavy Head of Security Engineering. We're looking for a builder, someone who enjoys solving technical problems, partnering with engineers, and implementing practical security solutions that enable product delivery rather than slow it down.The ideal candidate combines deep technical expertise with strong leadership, operational ownership, and the ability to influence engineering teams in fast-moving cloud-native environments.Success in this role requires someone who enjoys working shoulder-to-shoulder with software engineering teams, building practical security solutions that improve both security posture and developer productivity.Location: Remote (United States)About the RoleAs a Head of Security Engineering, you will:Lead and mature Digital Harbor's security engineering program across product, cloud, and operational securityServe as the primary security partner for Engineering, Product, Infrastructure, and executive leadershipDrive adoption of security-by-design practices throughout the SDLCBuild practical, developer-friendly security standards and engineering guardrailsLead hands-on security initiatives while establishing longer-term security prioritiesImprove detection, response, and operational security capabilitiesFoster a collaborative security culture focused on enablement rather than bureaucracyHelp shape the future security organization as the company continues to scaleThis role is ideal for someone who wants broad ownership, meaningful technical influence, and the opportunity to build security alongside a growing engineering organization.ExperienceThe ideal candidate will have:Experience working within a software product company where security was embedded directly into software engineering and product development processes strongly preferred.6–9+ years of progressive experience in Security Engineering, Product Security, DevSecOps, Cloud Security, Application Security, or Security ArchitectureExperience securing modern SaaS products and cloud-native applicationsExperience working within a software product company (strongly preferred)Experience operating within AWS and/or GCP cloud environmentsProven ability to partner closely with software engineering, platform engineering, and DevOps teamsDemonstrated success leading cross-functional technical initiativesExperience balancing strong security outcomes with engineering velocityDemonstrated history of ownership and measurable impact through meaningful tenure within previous organizations. Candidates who have successfully built and matured security capabilities over multiple years are strongly preferred.Core Areas of ResponsibilityProduct & Platform SecurityDrive security-by-design practices throughout the software development lifecyclePartner directly with engineering teams to improve application, API, and platform securityEmbed practical security controls into CI/CD pipelines and developer workflowsLead threat modeling and architecture security reviewsChampion DevSecOps practices focused on automation and developer enablementEstablish secure engineering standards and best practices across the organizationCloud & Infrastructure SecurityLead cloud security initiatives across AWS and/or GCPDefine and implement scalable security controls for:Infrastructure as CodeKubernetes and containerized environmentsCloud-native architecturesImprove cloud security posture through automation, monitoring, and infrastructure hardeningPartner with Infrastructure and DevOps teams to reduce operational risk without introducing unnecessary frictionEnsure security controls scale alongside the platformSecurity Operations & Incident ResponseLead security incident response efforts with hands-on technical involvementImprove detection, monitoring, investigation, and response capabilitiesDrive automation that reduces manual operational effortBuild repeatable operational security processesContinuously improve security controls against evolving threatsSecurity Leadership & Organizational InfluenceAct as the primary leader for security engineering initiativesHelp define and execute the company's security roadmapBuild strong partnerships across Engineering, Product, Operations, Legal, and LeadershipPromote security as a business enabler rather than a blockerMentor engineers and advocate for secure engineering practicesIdentify future staffing, tooling, and process needs as the security program growsRisk, Compliance & GovernanceSupport SOC 2 and ISO 27001 initiatives by implementing practical engineering controls that satisfy compliance requirements while maintaining engineering velocityAssist with vendor security reviews and technical risk assessmentsPartner with Legal and Product teams on privacy and data protection initiativesMaintain practical, risk-based security processes that support business growth without unnecessary bureaucracyContribute to documentation, standards, and policies where appropriateDesired Skills & AttributesTechnical ExperienceCloud Security (AWS and/or GCP)DevSecOps and CI/CD SecurityInfrastructure as Code (Terraform preferred)Security Engineering and AutomationDetection & Response EngineeringApplication SecurityAPI SecurityVulnerability ManagementThreat ModelingContainer and Kubernetes SecurityLeadership & MindsetBuilder mentality with a strong sense of ownershipHands-on, execution-oriented, and highly collaborativeComfortable operating in fast-moving, evolving environmentsExcellent communication skills with both technical and non-technical stakeholdersPragmatic approach to balancing security, scalability, and product deliveryAbility to influence through collaboration rather than excessive processBias toward action, continuous improvement, and measurable business impactAdditional Preferred ExperienceExperience with modern security tooling and cloud-native security platformsFamiliarity with AI security risks and emerging threat landscapesExperience securing modern SaaS productsExperience supporting distributed engineering organizationsExperience helping build or scale a security engineering functionNice to HaveCISSP, CISM, or equivalent certificationExperience in high-growth SaaS organizationsExposure to modern product security practices at scaleWhy Join Digital HarborThis is a unique opportunity to become the first dedicated security engineering leader at a growing SaaS company. You'll have the autonomy to shape the security program, influence engineering practices, and build scalable security capabilities that directly support product innovation and company growth.Digital Harbor is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state, and local laws that prohibit employment discrimination. xhyhwjd Reasonable accommodations are available on request for candidates taking part in all aspects of the selection process.