Director, Product Security

What you will do

SolarWinds is looking for a Director of Product Security to build and lead a new, AI-first product security team for our SaaS portfolio: SolarWinds Observability, SolarWinds Service Desk, SolarWinds Incident Response, Pingdom, Loggly, Papertrail and Database Performance Monitor. The team owns security from incident response through prevention. That covers how security findings are triaged and routed, SaaS security incident command, software supply chain and build integrity, application, AI and cloud security standards, and the engineering evidence behind our SOC 2 and FedRAMP programs.

• This team is AI-first. Its engineers build the agents that do the routine work, such as triaging findings, opening fixes, reviewing code and collecting audit evidence, and they make the judgment calls themselves.
• Build and lead a team of security engineers across the US, Europe and India, starting with the first set of hires and growing it based on measured results.
• Set the product security strategy and standards for our SaaS products, and co-chair the Product Security Council with engineering leadership.
• Own SaaS security incident command, working with the CISO organization.
• Own how security findings are triaged and routed to the teams that fix them, and publish a monthly report on critical and high risk across the portfolio.
• Lead the team's AI-first operating model: a budgeted set of security agents the team builds, measured by cost per outcome and by how often they miss real issues.
• Own software supply chain and build integrity standards across the portfolio for SaaS products.
• Agree clear boundaries and shared programs with the CISO organization to avoid duplicating its work.
• Get the most out of the security tools already selected, set requirements for them, and take part in tool consolidation or new tool decisions.
• Work with SRE and product teams to move SOC 2 and FedRAMP evidence collection from manual work to automation.
• Own the team's hiring plan, budget and token budget, and report progress to engineering leadership.

Required Qualifications

• 12+ years in security engineering, including 5+ years leading security engineering teams.
• Hands-on experience as a security engineer before moving into leadership.
• Experience leading product or application security for multi-tenant SaaS on AWS and Kubernetes. Azure or GCP experience is a plus.
• Experience leading teams that build their own automation, including AI agents or LLM-based tooling in production.
• Experience running or commanding security incidents, including customer and regulatory notification with legal and PSIRT partners.
• Working knowledge of software supply chain security: SBOMs, artifact signing, provenance and SLSA.
• Engineering-side experience with compliance programs such as SOC 2, ISO 27001 or FedRAMP.
• A track record of influencing engineering leaders and working well with a CISO organization.
• Experience managing teams spread across time zones.
• Strong written communication for both executive and engineering audiences.

What we are looking for

• A builder's mindset: automation and secure defaults over review queues
• Calm, clear leadership during incidents
• Credibility with engineers and with the CISO organization
• Decisions driven by outcomes and data, not activity
• Gets the most out of tools someone else picked
• Hires well and grows people

On-Call Expectations
This role is an escalation point for SaaS security incidents, and takes part in the security incident-commander rotation while the team is being built.