12+ years in security engineering, with 5+ years in leadership roles.
Hands-on experience as a security engineer prior to leadership.
Experience in product/application security for multi-tenant SaaS on AWS and Kubernetes; Azure or GCP is a plus.
Proven track record in building automation, including AI agents or LLM-based tooling.
Experience managing security incidents and coordinating with legal and PSIRT partners.
Knowledge of software supply chain security practices, including SBOMs and artifact signing.
Familiarity with compliance programs like SOC 2, ISO 27001, or FedRAMP.
Responsibilities
Build and lead a new AI-first product security team for the SaaS portfolio.
Set product security strategy and standards, co-chairing the Product Security Council.
Own SaaS security incident command and collaborate with the CISO organization.
Manage the triage and routing of security findings, publishing monthly risk reports.
Lead the team's AI-first operating model, focusing on cost-effectiveness and issue detection.
Establish software supply chain and build integrity standards across SaaS products.
Collaborate with SRE and product teams to automate SOC 2 and FedRAMP evidence collection.
Benefits
Opportunity to build and lead a new team in a cutting-edge AI-first environment.
Work with a diverse team across the US, Europe, and India.
Engagement in high-impact decision-making at the product security level.
Access to advanced security tools and resources for innovation.
Potential for professional growth and development in a leadership role.
Full Job Description
What you will do
SolarWinds is looking for a Director of Product Security to build and lead a new, AI-first product security team for our SaaS portfolio: SolarWinds Observability, SolarWinds Service Desk, SolarWinds Incident Response, Pingdom, Loggly, Papertrail and Database Performance Monitor. The team owns security from incident response through prevention. That covers how security findings are triaged and routed, SaaS security incident command, software supply chain and build integrity, application, AI and cloud security standards, and the engineering evidence behind our SOC 2 and FedRAMP programs.
This team is AI-first. Its engineers build the agents that do the routine work, such as triaging findings, opening fixes, reviewing code and collecting audit evidence, and they make the judgment calls themselves.
Build and lead a team of security engineers across the US, Europe and India, starting with the first set of hires and growing it based on measured results.
Set the product security strategy and standards for our SaaS products, and co-chair the Product Security Council with engineering leadership.
Own SaaS security incident command, working with the CISO organization.
Own how security findings are triaged and routed to the teams that fix them, and publish a monthly report on critical and high risk across the portfolio.
Lead the team's AI-first operating model: a budgeted set of security agents the team builds, measured by cost per outcome and by how often they miss real issues.
Own software supply chain and build integrity standards across the portfolio for SaaS products.
Agree clear boundaries and shared programs with the CISO organization to avoid duplicating its work.
Get the most out of the security tools already selected, set requirements for them, and take part in tool consolidation or new tool decisions.
Work with SRE and product teams to move SOC 2 and FedRAMP evidence collection from manual work to automation.
Own the team's hiring plan, budget and token budget, and report progress to engineering leadership.
Required Qualifications
12+ years in security engineering, including 5+ years leading security engineering teams.
Hands-on experience as a security engineer before moving into leadership.
Experience leading product or application security for multi-tenant SaaS on AWS and Kubernetes. Azure or GCP experience is a plus.
Experience leading teams that build their own automation, including AI agents or LLM-based tooling in production.
Experience running or commanding security incidents, including customer and regulatory notification with legal and PSIRT partners.
Working knowledge of software supply chain security: SBOMs, artifact signing, provenance and SLSA.
Engineering-side experience with compliance programs such as SOC 2, ISO 27001 or FedRAMP.
A track record of influencing engineering leaders and working well with a CISO organization.
Experience managing teams spread across time zones.
Strong written communication for both executive and engineering audiences.
What we are looking for
A builder's mindset: automation and secure defaults over review queues
Calm, clear leadership during incidents
Credibility with engineers and with the CISO organization
Decisions driven by outcomes and data, not activity
Gets the most out of tools someone else picked
Hires well and grows people
On-Call Expectations This role is an escalation point for SaaS security incidents, and takes part in the security incident-commander rotation while the team is being built.
About SolarWinds
SolarWinds Corporation provides IT infrastructure management software products. The Company offers products that are designed to monitor and manage the performance of servers, networks, databases, applications, and storage from a single web-based dashboard. SolarWinds serves customers worldwide. SolarWinds Corporation was founded in 1999 and is headquartered in Austin, Texas.
