Director, Security Engineering

US-REMOTE. Posted 10 days ago

The role

The Director, Security Engineering owns how Instructure builds and runs securely. This role leads product security, cloud and infrastructure security across AWS, and AI security.

What you will do

Lead product security including threat modeling, design review, and the release gate
Approve standard product launches and own pen test and bug bounty intake
Lead cloud and infrastructure security including IAM, AWS guardrails, and infrastructure as code
Own the WAF standard and approve WAF rule changes and patch window changes
Set security standards for AI features, agents, and AI services
Define controls for prompt injection, agent permissions, tool abuse, data leakage, and unauthorized access
Set intake and risk review for third-party AI services and manage shadow AI risk
Set security architecture and design standards
Own vulnerability management across code and cloud
Set secure SDLC standards and release criteria

Required qualifications

10+ years in security engineering
5+ years leading security teams
Has led product security and cloud security teams
Hands-on depth in cloud environments
Practical knowledge of AI and LLM security risks, such as prompt injection, agent abuse, and data leakage
Practical knowledge of frameworks such as OWASP Top 10 for LLM Applications and NIST AI RMF
Has influenced senior Engineering leaders on design and risk trade-offs
Experience in SaaS

Nice to have

Ideally handling regulated data such as education records (FERPA, COPPA)

Benefits

Competitive compensation
Ownership program for all full-time employees
Flexible work culture
Generous time off, including local holidays and annual Dim the Lights period
Comprehensive wellness programs and mental health support
Learning and development resources, including professional development tools and tuition reimbursement
The technology and tools you need to do your best work
Motivosity employee recognition program

Before you apply

All employees must pass a background check
Identity verification measures implemented
Candidates may be asked to verify legal name, current physical location, and provide a valid contact number and residential address

About the company

Instructure aims to amplify the power of people by creating intuitive products that simplify learning and personal development. They provide opportunities to smart, creative, and passionate people to create awesome.