Director of Security

Pura•Pleasant Grove, UT

105d

About The Position

The Director of Security develops and implements Pura’s organizational security strategy, including cloud security and security for hardware and IoT devices. The role works closely with IT, Legal, People, cloud SREs, and the embedded systems team to support threat hunting, automation, security tooling improvements, disaster recovery, and security best practices. It also contributes to code audits and validation checks, and reports directly to the VP of Security. The Director partners with the VP of Security on policies and strategy, leads the security team, monitors security threats and trends, assesses vulnerabilities, and responds to security incidents. The role may also work with law enforcement and other organizations to investigate incidents and support IT and cloud services when possible.

Requirements

10+ years of experience in information security, focused on cloud security and hardware or IoT devices.
Deep understanding of cloud security platforms, including AWS, Google, and Microsoft cloud environments.
Understanding of embedded hardware systems and IoT protocols such as MQTT.
Strong understanding of security threats and trends.
Experience developing and implementing security policies and procedures.
Experience conducting security audits and assessments.
Experience responding to security incidents and breaches.
Basic or better scripting and coding abilities.
Excellent communication and interpersonal skills.
Ability to work independently and as part of a team.

Responsibilities

Develop organizational security policies and strategy in collaboration with the VP of Security.
Manage the security team and ensure it has the resources and training needed to succeed.
Stay current on security threats and trends.
Conduct security audits and assessments, identify vulnerabilities, and recommend improvements.
Respond to security incidents and breaches in a timely and effective manner.
Work with law enforcement and other organizations to investigate security incidents.
Collaborate with IT, Legal, People, and cloud SREs on threat hunting, automation, security tooling improvements, and disaster recovery.
Work with the embedded systems team to ensure hardware and software protocols follow security standards.
Assist with code audits and validation checks.
Support IT and cloud services when possible.
Develop tools and integrate APIs using scripting and coding.