Director of Security Engineering
Sysdig · Flexible - USA
About the role
Heads security engineering in Sysdig's Office of the CISO across four areas: securing the product, securing production, offensive testing and assurance engineering. The director runs Sysdig's own security program on Sysdig's technology, including the headless form of Sysdig Secure and the company's AI workload protection products, and has a direct line into product roadmap decisions as the company's first customer.
The director sets the function's roadmap, standards and budget, makes the final calls on tooling, and hires and leads senior and staff security engineers while staying close to the code. Responsibilities include threat modelling the cloud defence platform, building secure-by-default primitives, running vulnerability management judged by fixes rather than tickets, hardening secrets, workload identity, Kubernetes and multi-cloud through Terraform and pipelines, and running detection and response on Sysdig's own telemetry. Two programs start from zero: continuous agent-driven pentesting paired with specialist human testers, and a security champions program covering classic and AI security. The role also moves ISO 27001, ISO 27701 and SOC 2 compliance to continuous, pipeline-generated assurance, sets rules for what coding agents may touch and commit, uses agents to automate the team's own repeatable work, and speaks and publishes externally.
Sysdig wants eight or more years in security or software engineering, at least four leading engineers with real budget ownership, deep expertise in two of the four pillars, security-as-code experience, hands-on incident response, and current work with agentic tooling. Remote in the US.