Director, Security

Podium•Lehi, UT

1d•Onsite

About The Position

We are seeking a Director of Security to lead both product security and core security engineering functions. This role is responsible for ensuring secure product development (AppSec), hardened cloud infrastructure (InfraSec), and the engineering of core security capabilities and services used across the company. You’ll lead a team responsible for building security into the SDLC, architecting secure cloud environments, and developing scalable controls and services (identity, secrets management, detection engineering, etc.). This is a hands-on, high-impact leadership role that combines strategic direction with technical depth, and will play a key role in scaling our security posture during a period of rapid growth.

Requirements

10+ years of experience in security and/or software engineering, with at least 5 years in a leadership role.
Proven track record building secure platforms and engineering security tooling in cloud-native SaaS environments.
Deep experience with cloud infrastructure (AWS/GCP/Azure), Kubernetes, identity and access management, and infrastructure as code.
Strong understanding of CI/CD security, application architecture, and secure design principles.
Experience managing security engineering teams, including setting technical strategy and hiring/development.
Exceptional collaboration skills with Product, Engineering, and DevOps stakeholders.

Responsibilities

AppSec Program Leadership – Own secure development practices, tooling, and training across all engineering teams.
Infrastructure Security – Define and enforce best practices for cloud infrastructure security, including IAM, network security, and workload isolation.
Security Services Engineering – Build and maintain core security services (e.g., authentication/authorization, secrets management, PKI, logging pipelines, etc.).
Tooling & Automation – Drive automation of security controls and processes across engineering and cloud environments.
Security Architecture – Serve as a technical authority on secure design patterns and architectural reviews.
Partnership & Enablement – Partner with DevOps, SRE, and Engineering teams to ensure secure, resilient, and scalable systems.
Threat Modeling & Red Teaming – Lead proactive threat modeling and collaborate with offensive testing teams to uncover and address gaps.
Metrics & Leadership Reporting – Report program maturity, technical risk, and engineering velocity to executive leadership.