Senior Director, Product Security

Leads the Product Security function at 1Password, reporting directly to the CISO and sitting on the security leadership team. The group spans application security and the secure development lifecycle, data and device security, privacy engineering, and security research, and this director manages the managers who run those areas.

The work starts with setting company-wide product security strategy, with particular attention to reducing risk early and to adopting AI safely. The director builds and scales the programmes, defines the metrics and dashboards that show progress, and represents product security in executive and board discussions. Day to day that covers secure coding and threat modelling practices, security built into CI/CD pipelines, the cryptography libraries and secrets management behind 1Password's products, security libraries for device features, and privacy controls across several product lines. The research team looks for new attack vectors and product vulnerabilities, publishes findings responsibly and engages the wider security community.

The company is looking for nine or more years in security, at least five of them leading teams or programmes at scale, with deep knowledge of application security, privacy and secure SDLC work. Experience overseeing security research, leading security initiatives involving AI, and briefing executives and boards is expected, as is a software development background in languages such as Go, Ruby on Rails or Python. A public profile through speaking, open-source work or bug bounties is a plus. The role is remote within the US and Canada.