Director of Product Security

Company Overview

is the next-generation digital identity wallet that simplifies how individuals securely prove their identity online. Consumers can verify their identity with  once and seamlessly login across websites without having to create a new login and verify their identity again. Over 152 million users experience streamlined login and identity verification with  at 20 federal agencies, 45 state government agencies, and 70+ healthcare organizations.

More than 600+ consumer brands use  to verify communities and user segments to honor service and build more authentic relationships. ’s technology meets the federal standards for consumer authentication set by the Commerce Department and is approved as a NIST 800-63-3 IAL2 / AAL2 credential service provider by the Kantara Initiative.  is committed to “No Identity Left Behind” to enable all people to have a secure digital identity.

To learn more, visit (Use the "Apply for this Job" box below)..

is the next-generation digital identity wallet that simplifies how individuals securely prove their identity online. Consumers can verify their identity with  once and seamlessly login across websites without having to create a new login and verify your identity again. Over 152 million users experience streamlined login and identity verification with  at 20 federal agencies, 45 state government agencies, and 70+ healthcare organizations.

More than 600+ consumer brands use  to verify communities and user segments to honor service and build more authentic relationships. ’s technology meets the federal standards for consumer authentication set by the Commerce Department and is approved as a NIST 800-63-3 IAL2 / AAL2 credential service provider by the Kantara Initiative.  is committed to “No Identity Left Behind” to enable all people to have a secure digital identity.

To learn more, visit   is a full-time, in-office culture. Unless a specific job description explicitly states otherwise, all roles are on-site five days per week at one of our offices in McLean, VA;
Mountain View, CA;
New York City, NY; or Tampa, FL. Certain roles — such as field-based sales or other remote-by-design positions — may have different work arrangements as noted in their individual postings. At , we embrace the thoughtful use of AI tools in our daily work and there are even occasions where we leverage AI in our hiring process. However, during the interview process, we want to understand your individual skills and experiences.

Therefore, we have guidelines on how AI can be appropriately used during your application and interviews which can be found here.

Location:

Mountain View, CA (on-site)

Reports to:

Chief Information Security Officer (CISO)

Department:
Security - Product Security

runs one of the most heavily scrutinized identity platforms in the world, and our engineers ship fast. Product Security is how we keep that speed safe. We're looking for a leader who believes security is practical and outcome-driven; every control we ask for reduces real risk, and our job isn't done when we file a ticket; it's done when the risk is actually gone.

This is a leadership role first. You'll own the Product Security program end-to-end, lead and grow the team, and be the trusted security partner to Engineering and not its gatekeeper.

• The Product Security (Prod Sec) program: threat modeling, secure code and architecture review, SCA, secret scanning, vulnerability management, CSPM and configuration management; integrated across the SSDLC as scalable, shift-left, developer-aligned controls.
• People leadership: build, grow, and lead a team of security engineers. You are accountable for their development, growth, and professional well-being; not just their output.
• The rules of the road: define what is and isn't acceptable security practice for Engineering clearly, with the why, so teams can self-serve instead of waiting on you.
• Secure-by-design consulting: partner with Product and Engineering early at design and architecture time so security is built in before code ships, not bolted on after.
• Security tooling & services: the team builds and maintains…