Security Engineering Director

Barclays•Jefferson, CO

About The Position

The purpose of the role is to drive technical excellence and innovation by leading the design and implementation of robust software solutions, providing mentorship to engineering teams, fostering cross-functional collaboration, and contributing to strategic planning to ensure the delivery of high-quality solutions aligned with business objectives. This role involves managing a business function, providing significant input to function-wide strategic initiatives, and contributing to policy and procedures. The Director will plan, manage, and consult on multiple complex and critical strategic projects, potentially business-wide. They will manage the direction of a large team or sub-function, leading other people managers and embedding a performance culture aligned with the company's values. For an individual contributor, they lead organization-wide projects and act as a deep technical expert and thought leader, identifying new ways of working and collaborating cross-functionally. They will train, guide, and coach less experienced specialists and provide information affecting long-term profits, organizational risks, and strategic decisions. The role requires providing expert advice to senior functional management and committees to influence decisions made outside of their own function, offering significant input to function-wide strategic initiatives. They will manage, coordinate, and enable resourcing, budgeting, and policy creation for a significant sub-function, escalating breaches of policies/procedures appropriately. A key focus is fostering and guiding compliance, ensuring regulations are observed, and that relevant processes are in place to facilitate adherence. The role also involves focusing on the external environment, regulators, or advocacy groups to monitor and influence on behalf of the company. The Director must demonstrate extensive knowledge of how the function integrates with the business division/Group to achieve overall business objectives. They must maintain broad and comprehensive knowledge of industry theories and practices within their discipline, alongside up-to-date relevant sector/functional knowledge and insight into external market developments/initiatives. Interpretative thinking and advanced analytical skills are required to solve problems and design solutions in complex/sensitive situations. Management authority will be exercised to make significant decisions and certain strategic decisions or recommendations within their area. Negotiation and influence with senior stakeholders, both internally and externally, are crucial. The Director will act as the principal contact point for key clients and counterparts in other functions/business divisions and will be mandated as a spokesperson for the function and business division. All Senior Leaders are expected to demonstrate clear leadership behaviors (Listen and be authentic, Energise and inspire, Align across the enterprise, Develop others) and adhere to the company's Values (Respect, Integrity, Service, Excellence, Stewardship) and Mindset (Empower, Challenge, Drive).

Requirements

Deep experience leading Application Security programs in large, complex, regulated, or global organizations with multiple business units, platforms, and delivery models.
Strong hands-on and leadership knowledge of SAST, DAST, SCA, API security, WAF, cloud security posture management, container security, and supply chain security.
Proven ability to integrate security tooling into CI/CD pipelines, developer platforms, cloud environments, and enterprise risk workflows at scale.
Strong stakeholder management skills, with experience influencing engineering, architecture, product, risk, compliance, and senior executive teams.
Ability to define strategy, build operating models, lead teams, manage vendors, measure control effectiveness, and communicate application security risk in business terms.
Employees are self-disciplined, hard working, curious, trustworthy, humble, and truthful.
Make choices according to what is best for the team.
Live for opportunities to collaborate and make a difference.

Responsibilities

Provision of guidance and expertise to engineering teams to ensure alignment with best practices and foster a culture of technical excellence.
Contribution to strategic planning by aligning technical decisions with business goals, anticipating future technology trends, and providing insights to optimize product roadmaps.
Design and implementation of complex, scalable, and maintainable software solutions, considering long-term viability and business objectives.
Mentoring and coaching to junior and mid-level engineers to foster professional growth and knowledge sharing, elevating the overall skillset and capabilities of the organization.
Collaboration with business partners, product managers, designers, and other stakeholders to translate business requirements into technical solutions and ensure a cohesive approach to product development.
Innovation within the organization by identifying and incorporating new technologies, methodologies, and industry practices into the engineering process.
Manage the direction of a large team or sub-function, leading other people managers and embedding a performance culture aligned to the values of the business.
Lead organisation wide projects and act as deep technical expert and thought leader, identifying new ways of working and collaborating cross functionally.
Train, guide and coach less experienced specialists and provide information affecting long term profits, organisational risks and strategic decisions.
Provide expert advice to senior functional management and committees to influence decisions made outside of own function, offering significant input to function wide strategic initiatives.
Manage, coordinate and enable resourcing, budgeting and policy creation for a significant sub-function.
Escalate breaches of policies / procedure appropriately.
Foster and guide compliance, ensure regulations are observed that relevant processes in place to facilitate adherence.
Focus on the external environment, regulators, or advocacy groups to both monitor and influence on behalf of Barclays, when appropriate.
Demonstrate extensive knowledge of how the function integrates with the business division / Group to achieve the overall business objectives.
Maintain broad and comprehensive knowledge of industry theories and practices within own discipline alongside up-to-date relevant sector / functional knowledge, and insight into external market developments / initiatives.
Use interpretative thinking and advanced analytical skills to solve problems and design solutions in often complex/ sensitive situations.
Exercise management authority to make significant decisions and certain strategic decisions or recommendations within own area.
Negotiate with and influence stakeholders at a senior level both internally and externally.
Act as principal contact point for key clients and counterparts in other functions/ businesses divisions.
Mandated as a spokesperson for the function and business division.
Demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard.
Lead the Application Security tooling engineering program to cover SAST, DAST, SCA, API security, WAF, ensuring consistent coverage across large, complex technology environments.
Own the strategy, engineering roadmap, and operating model for key platforms including Wiz, Akamai WAF technologies, SAST/DAST tooling, API security platforms, and software supply chain security controls.
Partner with Proactive Defense, Application, Cloud, Platform, DevOps, and Security architecture teams to embed security into the SDLC, CI/CD pipelines, cloud workloads, and developer workflows without slowing delivery.
Build and lead a high-performing AppSec Engineering team responsible for tool engineering, automation, control effectiveness, secure development enablement, and continuous improvement of application security capabilities.