Director, Security Engineering & Operations

Leads WHOOP's enterprise security engineering and security operations teams, reporting to the CISO and sitting on the Security leadership team. The director manages a growing group of managers, engineers and analysts and shapes the operating model and technical roadmap as the company scales and adopts more AI.

The role sets strategy, standards and measurable goals for both functions. It builds a detection and response program driven by risk and threat priorities, linking scenarios such as identity attacks, data loss and insider risk to the telemetry, detections and response procedures needed to handle them, and owns incident readiness and response, including incident command for major events and follow-through after reviews. The director guides the engineering of preventive and detective controls across identity, endpoint, cloud, SaaS, infrastructure and data, leads the security approach for AI-enabled products and company AI use, and makes disciplined build, buy and partner decisions while holding managed security providers to clear outcomes. Planning, metrics and execution across the portfolio, coaching staff, working with the CISO on hiring and organisation design, and partnering with Product Security, Architecture, Platform, Fraud, IT, GRC, Legal and Privacy round out the job.

WHOOP wants ten or more years in information security with deep security operations and solid engineering experience, at least five years leading people including managers, expertise in detection engineering, SIEM and incident response, experience managing MDR or MSSP partners, and experience securing AI systems. Health technology experience helps. The role is on-site in Boston.