{"id":3404717,"url":"https://alion.io/job/divar-director-of-security","title":"Director of Security","company":{"id":62484,"name":"Divar","domain":"divar.ir","url":"https://alion.io/company/divar","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":true,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":95,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":363,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tehran, Iran"],"countries":["IR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":53000,"max_usd":119000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":4188},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Apache Kafka","optional":false},{"name":"CI/CD","optional":false},{"name":"Go","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-10-28T15:47:43Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-04T05:21:59Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"About Divar. Millions of people use Divar to buy, sell, rent, and hire. We run most of the platform ourselves: bare-metal and virtualized infrastructure across several data centers, Kubernetes, Go and Python microservices, Kafka, a range of SQL and NoSQL databases, distributed storage, and our own CI/CD - plus Android, iOS and web clients. That makes securing it our job too.\nHow security works at Divar. Each infrastructure and product team owns the security of what it builds and runs. A security chapter - engineers who sit inside the infrastructure, backend, mobile and web tribes - sets the bar with them, helps them meet it, and checks the result. Platform teams turn recurring controls into safe defaults. Specialist work, such as incident response retainers, threat hunting, forensics, and red teaming, is done with outside partners, under our direction, and without standing access.\nThe role. We're looking for a proven engineering leader to make security their full-time job. You lead the security chapter and own Divar's security program end to end: the standard, the roadmap, the risk register, and the results. You report to the CTO, meet the CEO in a quarterly security steering review, and can take a critical risk straight to the founder when it isn't being addressed.\nA security background is not required. We care more that you have run serious engineering organizations, understand how systems fail, and can get many teams to deliver on a shared goal. You'll learn security deeply and quickly - and you should want to.\nWhat makes a Director of Security at Divar?\nYou've built and run real systems. You've owned production infrastructure or platforms at scale and know where they break: access, secrets, deployments, backups, dependencies.\nYou get cross-team programs over the line. You've driven work that many teams had to deliver, without managing all of them, and you know the difference between a plan and a result.\nYou measure progress. \"We're hardened\" isn't an answer. \"73% of CIS Level 1 controls pass, and every failure has a documented exception\" is.\nYou think about risk, not checklists. You choose what matters most, write down what we decide to accept, and come back to it.\nYou learn fast and ask the right people. You go deep enough to judge a design yourself, and you know when to rely on the specialists in the chapter and on outside partners.\nYou're honest about trade-offs. You can tell leadership what a decision costs in risk, money, and team capacity, and you're willing to say \"not now.\"\nYour first year\nMonth 1: Get to know the people, products, and stack. Review the security roadmap already underway across the datacenter, production platform, CI/CD, data, and client teams. Walk the security standard, threat scenarios, and controls with the chapter until you can explain each top risk in your own words.\nMonths 2-3: Take ownership of the roadmap. Get the security charter approved: company-wide standard, exception process, risk acceptance, and remediation deadlines. Agree each chapter member's priorities with their tribe lead. Put the incident response partner under contract.\nMonths 4-12: Security posture is measured and reported every quarter. Asset inventory is complete and visible. Recovery drills run on a schedule. Hardening reaches the remaining data stores. Security is part of every design review and every release gate. By then we'll rely on your judgment to tell us what comes next.\nWe'll judge your success by how much risk goes down and how much more resilient we become, not by how many policies or tools you introduce.\nRequirements\n10+ years in software or infrastructure engineering, including 4+ years leading engineering or security teams, ideally across several teams.\nOwnership of production systems at scale: infrastructure, platform, or backend services, including on-call and incident handling.\nA track record of driving cross-team programs to measurable completion.\nSound engineering judgment across Linux, networking, Kubernetes, and distributed systems.\nExperience hiring and mentoring engineers and leading through managers who own delivery.\nClear written communication with both engineers and executives.\nPreferred qualifications\nHands-on exposure to security work: access management, SSO, secrets, incident response, hardening, or vulnerability management.\nOn-premises or bare-metal infrastructure experience.\nBusiness continuity and disaster recovery: RTO/RPO, restore testing and drills.\nRunning systems with limited connectivity or limited vendor access.\nEngineering leadership at a large online platform or marketplace.\nBenefits\nReal impact: You'll protect a platform millions of people use every day.\nAuthority and access: A written charter, a direct line to the CTO, and a quarterly review with the CEO.\n Strong engineering peers: You'll work with engineers who care about doing things right.\nFlexible working hours, health insurance, and a culture that values learning and autonomy.","description_format":"text","description_chars":4971,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Online Classifieds"],"lifecycle":[{"event":"open","at":"2026-10-28T15:47:43Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":363,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/divar-director-of-security","json_url":"https://alion.io/job/divar-director-of-security.json","meta":{"generated_at":"2026-11-04T06:48:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10681,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":62484},"rest":"https://alion.io/mcp/rest/get_company?id=62484"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdivar-director-of-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdivar-director-of-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdivar-director-of-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/divar-director-of-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdivar-director-of-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3404717}},{"tool":"search_jobs","arguments":{"company":"divar.ir","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3404717},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}