Director, Security

The role

The Director of Security will own security across a large portfolio of client-facing products running on AWS and Azure. This role involves designing security into architecture, delivery pipelines, and AI features while leading a security team.

What you will do

• Own the threat model for every AI/LLM-powered feature
• Build adversarial evals and red-team exercises for AI features
• Set a unified security architecture across AWS and Azure
• Harden Kubernetes with admission control, network policy, and runtime threat detection
• Own edge security across every client-facing product
• Run an API security program covering inventory, authentication, and abuse detection
• Build paved roads for secure engineering and embed scanning in CI/CD
• Own detection engineering and incident response across cloud, Kubernetes, edge and AI layers
• Own the security tooling budget and negotiate with vendors
• Set direction for governance, risk and compliance

Required qualifications

• 12+ years in security
• 4+ years leading a security function in a product engineering organisation with a multi-product, client-facing portfolio, including ownership of its tooling budget
• Hands-on depth in cloud security on both AWS and Azure
• Practical experience securing AI/LLM-powered features in production
• Strong application and API security background: OWASP Top 10 and API Top 10, OAuth/OIDC, authorization design and secure SDLC
• Experience running and tuning edge defences in production
• Detection and incident response leadership, including at least one serious incident handled end to end
• Has overseen compliance programs such as GDPR, PCI DSS or EU AI Act readiness alongside a GRC team
• Comfortable writing code or scripts (Python, Go or similar) to automate, prototype and review
• Communicates risk to engineers and executives with equal clarity

Nice to have

• Has built LLM red-teaming or eval harnesses, or contributed to OWASP GenAI, MITRE ATLAS or similar work
• Experience with AI gateways or LLM firewalls, or with securing agentic workflows
• Background working alongside data science teams on model and data pipeline security
• Familiarity with the OWASP Top 10 for LLM Applications and the NIST AI RMF
• Certifications such as CISSP, CCSP, OSCP or cloud security specialties

About the company

BOLD is an established global organization that helps people find jobs through digital products. They create products that empower millions of people in 180 countries to build resumes, cover letters, and CVs.