Want to know if this job is worth applying to?
Sunnyvale, California, United States
Onsite
Illumio is the leader in ransomware and breach containment, redefining how organizations contain cyberattacks and enable operational resilience. Powered by the Illumio AI Security Graph, our breach containment platform identifies and contains threats across hybrid multi-cloud environments – stopping the spread of attacks before they become disasters.
Recognized as a Leader in the Forrester Wave™ for Microsegmentation, Illumio enables Zero Trust, strengthening cyber resilience for the infrastructure, systems, and organizations that keep the world running.
The Office of the CTO and Security team sets the strategic technical direction of the company while keeping both Illumio and our customers secure. Those who join us represent the leader in Zero Trust Segmentation and maintain Illumio’s competitive advantage by exploring new technologies while collaborating with Engineering and Product Management.
We are looking for people who leverage differences and push the pace of innovation in a time when the world faces its greatest cybersecurity threats in history.
Illumio is seeking a senior security leader to own and evolve our Application and Product Security programs, spanning from code to cloud. As Sr. Director of Product Security, you’ll lead a talented team of AppSec Engineers and our internal Product Red Team, working across the entire software lifecycle to build, break, and strengthen the security of our products.
You’ll collaborate deeply with Engineering, Product, Legal, and other cross-functional partners to integrate security into the fabric of how we build. This role is both strategic and hands-on — you'll help define long-term vision, guide technical execution, and ensure secure outcomes across a rapidly growing product portfolio.
This is a high-visibility leadership role within the Security organization, reporting directly to the VP of Security, and part of our broader security leadership team.
Lead and scale Illumio’s Product Security, Testing and Vulnerability Management Team functions
Own the Product Security strategy, roadmap, and execution
Embed security into SDLC, CI/CD pipelines, and cloud-native architectures
Partner with Engineering and Product to enable secure design and development
Define and drive secure code reviews, threat modeling, and risk remediation processes
Develop KPIs and metrics to measure impact and inform security posture
Engage with customers and prospects on product security posture, as needed
Present to senior leadership and stakeholders across the business
Foster a culture of trust, curiosity, and continuous improvement
10+ years in Application/Product Security roles, with 5+ in leadership
Deep understanding of application architectures, secure coding, and cloud platforms
Experience managing offensive security, with hands-on experience as a tester
Strong communication skills — able to explain complex topics to technical and non-technical audiences
Comfortable operating in ambiguity — you can chart a path and move forward even when all the answers aren’t clear
Proven collaborator and relationship-builder across functions
Experience engaging with customers and earning trust through transparency and technical clarity
Proficiency in both technical execution (e.g., code review, tools selection) and executive-level storytelling (e.g., building impactful presentations)
Familiarity with Ruby, C/C++ and Golang.
Comfortable working in both multi-cloud and on-prem environments.
Experience with both SaaS and on-prem software delivery models.
#LI-PO1 #LI-ONSITE
Our Commitment
Illumio believes that an environment of unique backgrounds, experiences, viewpoints, and individual contributions creates a culture of belonging, drives our future, and makes us stronger together in support of our customers and their success.
All official job offers from our company are extended directly by our recruitment team and will be sent through an official E-Signature document for your review and signature. Please be aware that we do not ask for any personal information in the process of extending offers of employment, such as financial details or social security numbers. Upon acceptance of any offer, we will request such information as part of the onboarding process prior to or on your first day of employment, and only after completing a background check through an authorized third-party vendor. If you receive any communication asking for personal details outside of these processes, please contact us immediately to verify the authenticity of the request. Your security is important to us, and we are committed to a safe and transparent hiring experience.
For roles in San Francisco and Los Angeles: Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Illumio will consider for employment qualified applicants with arrest and conviction records.