We are seeking for a Director of Product security for full responsibility of our product security.
The successful candidate will be responsible for driving our SaaS/On-prem strategic security program.
Responsibilities:
Develop and lead the strategic vision to manage both internal and external risks associated with Varonis products and solutions, both on-prem and cloud.
Work to obtain the right mandate to ensure no new products or services are launched without the appropriate security controls.
Proactively advise the business on how to maintain compliance with appropriate regulatory or industry best practices.
Drive secure development lifecycle and integration of security features into all phases of software design and development.
Identify and facilitate remediation of application and cloud security exposures and vulnerabilities.
Conduct cloud security strategy, readiness and discovery assessments; be familiar with cloud security frameworks, compliance requirements and security operations.
Research new application security tools and technologies as requested, and evaluate options that enhance security capabilities.
Work closely with R&D to enhance application security on all layers.
Requirements:
10+ years of experience in Product security / Cloud security tech lead within R&D.
Must be certified in IT Security e.g., CISSP, CISM, CCSP.
Thorough understanding of cyber security frameworks, such as NIST CSF, CIS CSC etc.
Experience of Cloud technologies and SaaS environments.
Experience with web & application security, familiar with OWASP frameworks, solutions and initiatives.
Experience with security solutions such as Web application firewalls, DB. Firewalls, Vulnerability scanners, and RASP/DAST/SAST solutions.
Technical experience in network security technologies or security operations with a proven ability to engage and drive product and engineering priorities.
Coordinate, participate, and deliver threat modeling for given\new designs and architectures.
Educate key stakeholders on program, risks, and importance of security in Varonis products & solutions.
Work with the business to identify, capture, escalate, and close security vulnerabilities found in our products.
Leverage tools to deliver vulnerability information back to the development organization for remediation.
Coordinate security risk assessments for new products & solutions through the risk assessment team.
Maintain a risk register and risk visual with clearly defined owners for each risk.
Develop product/solution security frameworks and standards to reduce development cycle of new products and services and to ensure consistency across the different products and platforms.
Define and maintain metrics and reporting strategies that effectively communicate successes and progress of the security program.
Develop, institute, and maintain cloud security architecture standards.
Project Manager skills:
Detail-Oriented, use time wisely and prioritize, effective communication, assertive but likable, a good listener and creative.