Director Application Security (Remote)

About Digibee

Digibee is an iPaaS that scales integration workflows while reducing cost and technical debt. Rather than require specialized integration experts, Digibee lets every developer quickly build, test, deploy, govern, and monitor integrations across on-premise and cloud environments using a simple but powerful low-code interface.

Founded in São Paulo, Brazil, in 2017 and headquartered in Weston, Florida, our team is widely distributed throughout the Americas. In May of 2023, Digibee closed a Series B funding round of $60 million that is intended to drive our expansion in the United States.

Position Overview:

The Director of Application Security at Digibee is a pivotal role, melding deep technical expertise with strategic leadership to fortify our cybersecurity infrastructure. This role demands a candidate who is not just a leader but a hands-on practitioner capable of diving deep into technical challenges. You will be at the helm of architecting and implementing advanced security solutions in a cloud-native ecosystem, guiding the AppSec team to new heights of technical excellence, and fostering a security-first mindset across the organization.

Responsibilities:

• Strategic Leadership & Vision: Chart the course for Digibee’s cybersecurity initiatives, ensuring they are seamlessly integrated across security architecture, cloud security, and application security domains.
• Hands-On Technical Mastery: Serve as the foremost authority in application security, directly engaging in and overseeing activities such as penetration testing, code reviews, security architecture reviews, and the evaluation of DevOps cloud security practices.
• Advanced Cloud Security Proficiency: Deep understanding and practical experience with Infrastructure as Code (IAC) tools like Terraform and Helm, Kubernetes security, and cloud SaaS security
• Team Building & Mentorship: Recruit, mentor, and lead a team of deeply technical individual contributors (ICs), ensuring the delivery of high-quality security solutions and fostering a culture of continuous learning.
• Educational Leadership: Spearhead initiatives to elevate security awareness and skills across the company, including developer training on security best practices.
• Risk Management: Work closely with IT and GRC teams to proactively manage and mitigate security risks, ensuring the highest standards of data protection and compliance.

Qualifications:

• Industry Experience: Minimum 7-10 years in roles focused on application security, offensive security, or cloud security, with a significant portion dedicated to security architecture & design.
• Proven Technical Leadership: Minimum 2 years in a leadership position managing high-performing technical teams, with a demonstrated ability to drive deeply technical security initiatives
• Technical Skills: Exceptional capability in security architecture, penetration testing, code review, automation development, cloud security, and secDevOps practices.
• Communication: Excellent communication skills, with a proven track record of effectively collaborating across functional teams.

Bonus Points:

• Certifications from GIAC, OffSec, AWS, GCP, ISC2, or similar.
• Experience in establishing an AppSec or OffSec organization from the ground up
• Expertise in developing and implementing security strategies and roadmaps.
• Familiarity with the startup ecosystem and its unique challenges and opportunities.
• Experience as a consultant for a variety of clients on offensive or defensive initiatives

Our culture

We believe in a highly collaborative work environment in order to foster constant development and exchange between teams. We encourage learning, sharing knowledge, and using new technologies to create disruptive ideas – we want to create something great together!

At Digibee, we know it’s our people who make the difference. We embrace and value diversity and are dedicated to encouraging a supportive and respectful culture in our community.

We are interested in every qualified candidate eligible to work remotely in the country of this job posting. However, we are not able to sponsor visas for this position.