Director, Product Security

The role

You will lead security execution at scale by driving the adoption of security controls and engineering playbooks. You will partner with engineering leaders to reduce friction and implement secure-by-default systems and practices.

What you will do

• Drive adoption of security controls across engineering via playbooks and paved paths
• Facilitate vulnerability intake, triage, tracking, and remediation planning
• Integrate enterprise security tooling into CI/CD and production environments
• Ensure threat modeling and security architecture are built into engineering workflows
• Propose alternatives for infeasible security requirements to maintain momentum
• Identify cross-domain architectural risks and drive alignment through governance processes
• Improve security incident preparedness and ensure post-incident actions translate to improvements
• Translate enterprise policies and compliance requirements into actionable engineering practices

Required qualifications

• 12+ years of progressive experience in information security, application security, cloud security, or software engineering
• Significant experience leading enterprise-scale security initiatives through technical influence
• Principal-level technical leadership with a track record of leading cross-team security initiatives
• Strong application security fundamentals such as authn/authz, session security, secure API design, data protection, threat modeling, and secure SDLC practices
• Pragmatic risk management with ability to prioritize and quantify tradeoffs
• Cloud and platform security experience including IAM concepts, secrets management, key management, service-to-service auth patterns, and logging/detection fundamentals
• DevSecOps and automation mindset with experience integrating security checks into CI/CD
• Depth in vulnerability management including triage, remediation strategies, and verification
• Excellent communication skills including concise, executive-ready writing and technical coaching

Nice to have

• Experience with streaming/media security and DRM ecosystems and output protection concepts
• Experience with mobile and device ecosystems (iOS/Android/TV devices), including secure storage patterns and platform attestation
• Familiarity with reverse engineering tools and client hardening/anti-tamper approaches
• Exposure to privacy/security compliance partnerships (GRC) and working with legal/product on policy requirements

Benefits

• Salary plus performance bonus earning potential, paid annually
• Flexible time off policies
• Medical, dental, vision, STD, LTD, and life insurance
• Health Saving Account HSA program
• Health care and dependent care FSA
• 401(k) plan with employer match
• Employer paid commuter benefit
• Support program for new parents
• Pet insurance

About the company

Crunchyroll delivers the art and culture of anime to a community of over 100 million fans across 200+ countries and territories. The company provides experiences through streaming video, theatrical, games, merchandise, and events.