Director of Application Security

SimplePractice

6h•$214,651 - $268,314

About The Position

SimplePractice is seeking a Director of Security Engineering to build and lead the team responsible for protecting its cloud infrastructure, corporate systems, and security operations. Reporting to the CISO, this leader will own security engineering strategy, influence vendor and tooling budgets, and oversee execution across cloud security, vulnerability management, incident response, detection engineering, identity security, and AI-driven automation. This is a hands-on leadership role combining technical expertise with people leadership. The director will initially hire, mentor, and develop two senior security engineers; establish team direction; and partner with leaders across the business to deliver practical security solutions that protect customers while supporting innovation. The role emphasizes relationship-building, influence, collaboration, and security as a shared responsibility.

Requirements

Extensive experience in security engineering, infrastructure security, or security operations, including leadership of technical teams and security programs.
Deep technical expertise in AWS security, vulnerability management, incident response, detection engineering, and modern security architecture.
Demonstrated success building, mentoring, and developing high-performing security engineering teams.
Exceptional interpersonal and communication skills, with the ability to build trust and influence stakeholders at all organizational levels.
Experience collaborating across Engineering, IT, Product, and business teams to implement practical, scalable security solutions.
Strong technical judgment and ability to balance security risks, business priorities, and engineering complexity.
Experience with cloud security platforms, endpoint protection, identity management, security monitoring, AI-driven automation tools, and compliance frameworks such as HIPAA and HITRUST.
Hands-on, collaborative leadership style, with the ability to set strategic direction while remaining technically engaged.
Pragmatic, business-oriented approach to security emphasizing partnership, accountability, and measurable risk reduction.

Responsibilities

Build and lead a high-performing security engineering team, initially hiring, mentoring, and developing two senior security engineers.
Define and own security engineering strategy, priorities, and outcomes across cloud and infrastructure security, vulnerability management, security operations, and incident response.
Strengthen detection, monitoring, and response capabilities to improve identification and handling of security threats.
Partner with IT and Engineering to improve identity and access management, endpoint security, cloud security posture, and infrastructure security while supporting compliance requirements such as HIPAA and SOC 2.
Build relationships across Engineering, Product, IT, Legal, Compliance, and other business functions, influencing security outcomes through collaboration and technical credibility.
Develop a risk-based security engineering roadmap focused on customer trust, resilience, and security posture.
Drive AI-driven automation and engineering best practices to reduce manual effort, improve security effectiveness, and enable secure operations at scale.
Establish clear ownership, measurable outcomes, and a culture of accountability, continuous improvement, and shared responsibility for security.
Manage the security tooling and vendor budget, focusing on cost efficiency, vendor relationships, and return on investment.
Oversee incident response operational readiness and participate in and shape on-call rotations to support rapid incident detection and mitigation.
Serve as a senior technical advisor to the CISO and business leaders, translating security challenges into actionable recommendations and influencing technical strategy and organizational risk decisions.