SailPoint · 3 months ago
Director, Cyber Product Security
SailPoint is a leader in cybersecurity, seeking a Director of Cyber Product Security to lead their security engineering team. The role involves developing and implementing product security strategies, collaborating with various stakeholders, and driving continuous improvements in the security program.
Enterprise SoftwareIdentity ManagementRisk ManagementSoftware
Responsibilities
Develop and lead the Cyber Product Security team in alignment with business goals and regulatory requirements
Build and mentor a high-performing team of cyber product security architects, engineers, and software security specialists
Lead Cyber Product Security’s collaboration with Engineering Security on the establishment and maturation of product security standards, secret management standards, architecture patterns and threat modeling practices, as well as resilient product technology frameworks
Collaborate with Engineering Security to integrate security tooling and practices into SailPoint’s SDLC and CI/CD pipelines, including the adoption of security automation, SBOM tooling, and AI coding security practices
Provide SAST/SCA, DAST, IAST, and SBOM support for software platforms developed for internal SailPoint use cases
Provide threat modeling, penetration testing services for software platforms developed for internal SailPoint use cases
Collaborate with Engineering Security on penetration testing of SailPoint’s customer-facing platforms, as well as coordinate all requests for customer-performed penetration tests of SailPoint’s platform
Lead Product Security Incident Response Team (PSIRT) activities across all software products developed by SailPoint, including customer-facing, as well as internally-focused software platforms
Lead SailPoint’s bug bounty program, requests for CVE’s for SailPoint’s products, as well as questions from 3rd party vendors and customers on product security issues
Collaborate with Engineering Security to implement developer security training on topics including secure coding practices, open source licensing policies, and AI-coding policies and standards
Develop a program to validate that product security policies, standards, and procedures are implemented by all SailPoint teams developing SailPoint software platforms
Monitor emerging threats, technologies, and compliance trends to proactively evolve the security posture of all software developed by SailPoint
Collaborate with SailPoint’s Legal, Compliance, and GRC teams to ensure alignment with global regulations, standards and certifications
Define and track KPIs to measure program effectiveness and maturity
Qualification
Required
7+ years in leadership roles, preferably in product or application security
Experience with secure software development practices and tools
Experience with regulatory frameworks (e.g., NIST, ISO 27001, GDPR)
Strategic Vision & Execution - Ability to define and communicate a clear vision for product security and resilience aligned with enterprise goals
Influence & Collaboration – Demonstrable experience building strong partnerships across an organization to drive secure-by-design culture
Technical Leadership - Understanding of product security issues, modern software development including multi-cloud architectures, Kubernetes, and software bill of materials (SBOM)
Manage entire lifecycle of security researcher findings, customer reported security questions, issues, incidents, associated CVE's
Change Management – Experience leading organizational change initiatives to embed security and resilience into product development lifecycles
Experience building relationships with software engineering teams, including managing mature product security including final security reviews, and, risk-driven product scoring/metrics
Talent Development - Demonstrable experience building high-performing teams through coaching, mentoring, and career development
Risk-Based Decision Making – Experience making informed decisions through balancing business priorities, technical constraints, and risk exposure
Executive Communication – Experience communicating complex technical concepts and ongoing program updates clearly to non-technical stakeholders and executive leadership
Preferred
Knowledge of artificial intelligence software security frameworks is preferred, including OWASP AI Security and Privacy Guide, NIST AI Risk Management Framework, Cybersecurity AI (CAI), Open SSF AI/ML Security Framework
Benefits
Health and wellness coverage: Medical, dental, and vision insurance
Disability coverage: Short-term and long-term disability
Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)
Additional life coverage options: Supplemental life insurance for employees, spouses, and children
Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account
Financial security: 401(k) Savings and Investment Plan with company matching
Time off benefits: Flexible vacation policy
Holidays: 8 paid holidays annually
Sick leave
Parental support: Paid parental leave
Employee Assistance Program (EAP) and Care Counselors
Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options
Health Savings Account (HSA) with employer contribution
Company
SailPoint
SailPoint is an identity and access management provider helping organizations deliver and manage user access from any device.
H1B Sponsorship
SailPoint has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (40)
2024 (35)
2023 (29)
2022 (51)
2021 (20)
2020 (22)
Funding
Current Stage
Public CompanyTotal Funding
$26.08MKey Investors
Thoma Bravo
2022-04-11Acquired
2017-11-16IPO
2014-12-25Series Unknown· $0.25M
Recent News
2026-01-22
2026-01-21
2026-01-09
Company data provided by crunchbase