Director of Cybersecurity
Zipline · South San Francisco, California, USA
About this role
**Director of Cybersecurity** **About Zipline** Zipline is the world’s largest and most experienced drone delivery service, on a mission to serve all humans equally by ensuring access to food, medicine, and essential goods anytime, anywhere. We design, build, and operate a global autonomous logistics system—delivering critical supplies quickly and reliably across four continents. **About You and The Role** Zipline operates autonomous delivery systems spanning cloud services, customer and operational data, embedded software, aircraft, and field infrastructure. Security must protect those systems, customers, partners, and the people who rely on them—while enabling engineering teams to deliver safely and quickly. As **Director of Cybersecurity**, you will own company-wide information security and privacy strategy and lead a lean, technical organization across application, product, and corporate security. You’ll focus first on the company’s most consequential risks and remediation decisions, then build the engineering capabilities, controls, and operating model that scale with Zipline. **What You’ll Do** - Set security and privacy strategy, risk posture, roadmap, operating model, and investment priorities across product, infrastructure, data, corporate technology, and physical systems. - Identify and sequence the company’s highest-consequence risks; drive clear remediation decisions with Engineering, IT, Legal, Safety, Operations, and Physical Security. - Help engineering teams move quickly and securely—make tradeoffs clear, reduce risk pragmatically, and build tools/processes that make secure development easy. - Communicate material security and privacy risk clearly to company leaders and partners, translating technical findings into business tradeoffs and investment decisions. - Lead a software security engineering team owning security capabilities in production, contributing fixes and reusable platforms, and working with Engineering to eliminate systemic vulnerability classes. - Build and develop a high-performing team through hiring, coaching, clear expectations, and direct performance management. - Establish security architecture and practices for identity, access control, secrets, data protection, applications, cloud infrastructure, embedded software, aircraft, and field infrastructure. - Lead threat modeling, testing, vulnerability management, incident response, and security reviews; measure risk coverage, remediation, readiness, control effectiveness, and secure-engineering adoption. **What You’ll Bring** - Proven senior leadership experience in a highly technical, fast-paced organization; experience operating at scale and leading security through rapid growth. Demonstrated experience owning security strategy and hands-on execution across information security, product security, or security engineering. - A software engineering foundation, including experience building production software, security systems, or technical controls. - Technical depth across application, infrastructure, cloud, identity, data, and hardware security. - Experience securing safety-critical or cyber-physical systems (e.g., embedded, robotics, aerospace, automotive, or industrial technology). - Experience leading serious security incident response and assessing threats from sophisticated external attackers. - Judgment balancing security, privacy, legal obligations, safety, engineering velocity, customer needs, and business objectives in a lean team. **Wh
Listing freshness
CronJobs last confirmed this listing 56m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.