This role can be performed remotely from anywhere within the United States.The Security Engineering team at Fullstory ensures that engineering teams across the company are enabled to securely design, build, test, and maintain the software & cloud infrastructure that powers our business. We focus on establishing a "paved road" so that engineers can move confidently to deliver secure technologies with minimal friction. The Security Engineering team considers leading with empathy and providing excellent customer service to our stakeholders paramount to success.
Reporting into the Director, Cloud Platform, this role will help lead the ongoing build-out of a holistic security engineering program at Fullstory. Whether running a detailed code review, establishing secure-development practices, mentoring engineers, or advising our product team on feature development, Fullstory's Security Engineering team members are focused on continuous improvement against our maturity model and Secure Development Lifecycle (SDL) to improve the outcomes for our teammates, while building services that our customers can trust.
In a typical day, you might:- Lead a team of application and cloud security engineers, including strategy and mentorship.
- Enable our partners, such as Security GRC and Legal, in supporting business outcomes.
- Create "paved roads," with a focus on automation, to speed up secure-engineering practices.
- Own and maximize investments in third-party security services, consultants, and technologies.
- Run incident response investigations in collaboration with Legal and external security firms.
- Advise peer leaders on cross-business initiatives and product strategy on security and risk.
Here's what we're looking for:- Has full-time people leadership experience in a similar type of team.
- Has experience owning, planning, and executing business-level security initiatives.
- Experience building sustainable security programs with an emphasis on customer service, partnership, and enablement of software engineering and business stakeholders.
- Experience participating in security architecture, risk management, vendor diligence, threat analysis, and other dimensions of technical expertise to support team initiatives.
- Experience directly managing security vendor relationships, project scoping, deployment, etc.
The impact you will have in 6 Months:- You will have built strong relationships with key stakeholders across Engineering, GRC, Legal, and Product, and established effective partnerships with security vendors to support program objectives.
- You will have assessed the current security program, taken ownership of quarterly roadmap planning and execution, and defined measurable goals to drive impact against the team's maturity model.
The base salary for this position ranges between $230,000- $240,000 USD. Base salary will vary based on relevant experience, job-related skills and qualifications. This role is also eligible for a discretionary bonus of up to 20% of base salary, contingent upon Fullstory meeting its performance targets.
#LI-Remote #LI-CD1
