Director of Engineering Security Factory

Open 17d

You will lead a distributed engineering organization responsible for customer-facing security capabilities. You will set the engineering vision and multi-quarter roadmap, guide managers and individual contributors, make architectural decisions, and deliver proprietary scanners, AI-driven detection, agentic remediation, and security foundations. You will partner with product management, represent the function in planning and customer discussions, establish delivery and quality standards, and contribute through documentation, issues, and merge requests.

Responsibilities

Set the engineering vision and multi-quarter roadmap for security scanners, AI-driven workflows, research, vulnerability management, and security foundations.
Lead a distributed engineering organization of managers and individual contributors.
Drive architectural decisions for AI and machine learning detection engines, agentic remediation flows, and scalable scanning infrastructure.
Partner with product management to define priorities, shape requirements, and deliver security capabilities.
Own engineering delivery for proprietary application security scanners, agentic remediation workflows, and AI security research.
Represent the Security Factory stage in cross-functional planning, executive reviews, security disclosures, and customer conversations.
Establish engineering standards for delivery, observability, incident response, scanner quality, and code quality.
Contribute through issues, merge requests, and the GitLab handbook.

Requirements

Experience leading engineering organizations with multiple teams and managers in a distributed environment.
Understanding of application security fundamentals, including Static Application Security Testing, Software Composition Analysis, secret detection, vulnerability management workflows, and software supply chain security.
Experience building detection, analysis, or scanning systems in a software as a service or DevSecOps environment.
Experience shipping a customer-facing AI or machine learning product feature tied to detection or remediation quality outcomes.
Ability to partner with product management on roadmap planning, prioritization, and requirements.
Written communication skills and comfort leading through documentation in a remote, async-first organization.
Familiarity with agentic AI systems, AI agent orchestration, threat intelligence research, or open source security tooling is useful.