Director, Product Security

We're looking for a Product Security Director to help us accomplish our mission to improve lives by learning from the experience of every cancer patient. Here's what you need to know about the role, our team and why Flatiron Health is the right next step in your career.

What You'll Do

In this role, you will lead the Product Security team in partnering with the larger engineering organization to develop safe and secure applications. Reporting to the Deputy CISO, you will provide technical management and guidance while working cross functionally to empower engineers and mitigate risk. In addition, you'll also:

• Build and maintain secure software development lifecycle methodologies and pipelines to ensure security is part of every phase of development and deployment
• Build a rigorous threat modeling methodology to be used as a foundation for risk management, development priorities, and testing schedules
• Provide a data-driven perspective on application and product security risks
• Define the vision, roadmap and metrics for the team
• Partner closely with other engineering and product leaders to align and execute on shared strategic goals
• Build and retain a diverse, inclusive organization, consisting of 5-7 highly skilled engineers through mentorship, guidance and career development

Who You Are

You're a product security engineer with 4 or more years experience managing a product security team. You're excited by the prospect of rolling up your sleeves to tackle meaningful problems each and every day. You're a kind, passionate and collaborative problem-solver who seeks and gives candid feedback, and values the chance to make an important impact.

• You have experience with threat modeling, security design reviews, and security architecture.
• You have excellent written and verbal communication skills to enable the translation of security objectives to engineering teams.
• You have a deep understanding of application and product architectures, programming languages, web application stacks, and SDLC pipelines.
• You have excellent judgment in prioritizing security efforts to mitigate the appropriate risks.
• You have the ability to identify, analyze, and explain the present or future needs for proposed security initiatives to senior management.
• You have formed successful relationships with senior leaders and have the technical depth to work closely with tech leads.
• You are excited to spend your time driving a technical vision and strategy but can also dive into the details as necessary.

If this sounds like you, you'll fit right in at Flatiron.

Why You Should Join Our Team

A career at Flatiron is a chance to work with everyone involved in the future of cancer care and research—all under one roof. Researchers, data scientists, designers, clinicians, technologists and many more all work together to improve cancer care and accelerate research.

At Flatiron, we strive to build and maintain an environment where employees from all backgrounds are valued, respected and have the opportunity to succeed. You'll also find a culture of continuous learning, broad and inclusive employee support offerings, and a commitment to supporting our team members in all aspects of their lives—at home, at work and everywhere in between. We offer:

• Flatiron University training curriculum which includes presentation skills, meeting mastery, coding languages and more
• Career coaching opportunities
• Hackathons for all employees (not just our engineers!)
• Professional development benefit for attending conferences, industry events and external courses
• Work/life autonomy via flexible work hours and flexible paid time off
• Generous parental leave (16 weeks for either parent)
• Back-up child care
• Employee Resource Groups (ERGs) that encourage our employees to share their unique experiences and perspectives
• Flatiron-sponsored fitness classes

COVID-19: Pursuant to Flatiron's health and safety protocol relating to COVID-19, candidates selected for hire must disclose their COVID-19 vaccination status and must be fully vaccinated in order to access our offices or travel to customer sites, subject to legally required exemptions for disability or sincerely-held religious belief. Flatiron will engage in an interactive process as appropriate for the particular position. For external-facing roles, especially those involving contact with vulnerable individuals, accommodations for unvaccinated status may not be feasible.

Flatiron Health is proud to be an Equal Employment Opportunity employer.

We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.