Job Opportunities API

We are seeking a strategic and hands-on Director of Security to create, lead and manage our organization’s cybersecurity and enterprise security program. This role is responsible for protecting digital assets, intellectual property, and critical infrastructure while enabling business growth and innovation. The ideal candidate combines deep technical expertise with executive leadership, ensuring security is embedded across systems, processes, and culture. We are seeking a strategic and hands-on Director of Security to create, lead and manage our organization’s cybersecurity and enterprise security program. This role is responsible for protecting digital assets, intellectual property, and critical infrastructure while enabling business growth and innovation. The ideal candidate combines deep technical expertise with executive leadership, ensuring security is embedded across systems, processes, and culture. Key Responsibilities: Cybersecurity Leadership Develop and execute a comprehensive cybersecurity strategy aligned with business objectives Lead enterprise-wide security architecture, including network, cloud, application, and endpoint security Oversee Security Operations (SOC), incident detection, response, and threat intelligence Establish and maintain a proactive vulnerability management and penetration testing program Drive zero-trust architecture and secure-by-design principles Risk Management & Compliance Identify, assess, and mitigate cybersecurity risks across the organization Ensure compliance with frameworks such as NIST SP 800-171, ISO 27001, SOC 2 (System Organization Controls 2), CMMC (Cybersecurity Maturity Model Certification), and GDPR (General Data Protection Regulation; as applicable) Lead internal and external security audits and certifications Develop and maintain policies, standards, and procedures Incident Response & Resilience Own the incident response lifecycle, including detection, preparation, containment, eradication, and recovery Lead crisis management for cybersecurity incidents and coordinate cross-functional response Conduct tabletop exercises and continuously improve response readiness Security Engineering & Operations Oversee implementation and optimization of security tools (SIEM, EDR, IAM, DLP, etc.) Partner with IT, DevOps, and Engineering to embed security into infrastructure and software development lifecycles (DevSecOps); minimize development cycles through continuous integration, continuous delivery (CI/CD) Manage third-party security risks and supplier assessments Leadership & Culture Promote a culture of security awareness across the organization Provide executive-level reporting on security posture, risks, and KPIs Serve as a trusted advisor to senior leadership Requirements This position requires access to export-controlled information. Employment is contingent upon the applicant being a U.S. person as defined by 8 U.S.C. § 1324b(a)(3). Qualifications Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field 12+ years of experience in cybersecurity or information security roles 5+ years in leadership or management roles Industry certifications such as CISSP, CISM, CISA, or CCSP Deep expertise in areas such as cloud security, network security, identity management, and threat detection Strong knowledge of regulatory and compliance frameworks (e.g., NIST, ISO, SOC 2) Experience leading incident response and security operations Preferred Master’s degree or MBA Experience in high-growth or regulated industries (e.g., fintech, healthcare, defense, or deep tech) Familiarity with zero-trust architectures and modern security frameworks Experience with the unique challenges of DCSA compliance and audit preparation within a fast-paced technology startup Startup Mindset: You're creative, flexible, and eager to wear multiple hats. You're passionate abo