Director, Application and Cloud Security

Remote – US

See yourself at Twilio

Join the team as Twilio's next Director of Application and Cloud Security on Twilio's Information Security team.

This position is needed to accelerate and modernize our information security program, with a specialization in securing our products and cloud environments.

We are seeking an experienced leader with a background in application and/or product security who will be responsible for influencing engineering and business decisions to improve the security of our products and services.

Responsibilities

In this role, you'll:

1. Lead the development and implementation of an industry leading product security strategy and roadmap, aligned with the direction of Twilio's product portfolio and strategy.
2. Build, develop, and execute on scalable and secure practices for the Twilio product engineering functions by leveraging automation and standardization.
3. Oversee application security and cloud security capabilities, following a "shift left" methodology to best integrate security throughout all phases of the software development lifecycle.
4. Evolve, iterate, and maintain a secure SDLC program to continuously deliver and improve security practices across a broad engineering community.
5. Identify and address security–related features and enhancements in Twilio's cloud deployments spanning AWS, Google Cloud, and other cloud service providers.
6. Partner with stakeholders to identify opportunities and implement changes to modernize our product security program.
7. Align with senior executives on the company's product security posture.
8. Lead a talented and experienced team of security engineers and managers.
9. Influence roadmaps and decisions, including anticipating roadblocks and challenges.

Qualifications

Required:

1. Experience leading a team of people managers and security engineers in the application, cloud, and/or product security domains.
2. 10+ years of experience in product security, including designing, implementing, and managing product security capabilities for cloud–based platforms and applications.
3. Software development experience, especially leading a product development organization.
4. Experience with engineering tools and practices, such as source control systems, continuous integration (CI), continuous deployment (CD).
5. Experience with a broad range of security technologies and processes, including but not limited to threat modeling, vulnerability management, static and dynamic application security testing, software composition analysis, application and/or cloud security posture management, penetration testing, and bug bounty programs.
6. Experience presenting to senior management in both verbal and written communications.
7. Hands–on software development skills with cloud service providers such as Amazon Web Services (AWS) or Google Cloud Platform (GCP).
8. Experience leading a bug bounty program with security researchers.

Location

This role will be remote but is not eligible to be hired in San Francisco, CA, Oakland, CA, San Jose, CA, or the surrounding areas.

What We Offer

There are many benefits to working at Twilio, including competitive pay, generous time–off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

Twilio is proud to be an equal opportunity employer.