Director of Product Security
ID.me · Mountain View, California, United States
About this role
**Director of Product Security** **Location:** Mountain View, CA (on-site) **Reports to:** Chief Information Security Officer (CISO) **Department:** Security - Product Security --- **About the Role** ID.me runs one of the most heavily scrutinized identity platforms in the world. Product Security keeps our fast-shipping pace safe. We're looking for a leader who believes security is practical and outcome-driven—every control reduces real risk, and success means risk actually gone, not just tickets filed. This is a leadership role first. You'll own the Product Security program end-to-end, lead and grow the team, and be the trusted security partner to Engineering. --- **What You'll Own** • Product Security program: threat modeling, secure code and architecture review, SCA, secret scanning, vulnerability management, CSPM and configuration management • People leadership: build, grow, and lead a team of security engineers • Define security standards and best practices so teams can self-serve • Secure-by-design consulting: partner with Product and Engineering early • Security tooling & services: build tools that help engineers ship secure products at velocity • Penetration Testing & Red Team: own execution and outcomes --- **What We're Looking For** **Must Have:** • Outcome-based leadership with focus on actual risk reduction • Accountability for results and driving fixes to closure • Partnership mindset with Engineering as your customer • Speed and judgment—assessments in days, not weeks • Technical depth across threat modeling, code review, SCA/SAST, secret scanning, vuln management, cloud/CSPM • Integrity and trust in handling privileged access • AI fluency—comfortable with Claude, Gemini, and custom tooling **Strong Preference:** • Built or matured AppSec/Product Security in fast-shipping, cloud-native environments (GCP, GitHub, Kubernetes/GKE, Terraform) • Hands-on with security tools: Socket.dev, Sysdig, Trivy, DependencyTrack, HackerOne • AI-augmented security workflows • Growth-stage experience building programs from the ground up --- **About the Environment** • AI-first culture—making it safe for everyone to use company-provisioned AI tools • Practical over procedural—technical enforcement over policy documents • One unified security team—ProdSec, SecOps, GRC, IT, and Physical Security collaborate daily --- **Compensation** $243,699 – $271,644 USD (Mountain View, CA) Comprehensive benefits include medical, dental, vision, 401(k) match, parental leave, unlimited PTO, and more.
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.