{"id":3706692,"url":"https://alion.io/job/instructure-director-security-engineering","title":"Director, Security Engineering","company":{"id":6996,"name":"Instructure","domain":"instructure.com","url":"https://alion.io/company/instructure","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":92,"open_postings":3,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":41,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":200000,"max":225000,"currency":"USD","period":"year","gross":null,"usd_annual":225000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"IAM","optional":false},{"name":"LLM","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"RAG","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-11-03T17:52:00Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-04T07:22:22Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"At Instructure, we believe in the power of people to grow and succeed throughout their lives. Our goal is to amplify that power by creating intuitive products that simplify learning and personal development, facilitate meaningful relationships, and inspire people to go further in their education and careers.\nWe do this by giving smart, creative, passionate people opportunities to create awesome. And that's where you come in:\nJob Description\nThe Director, Security Engineering owns how Instructure builds and runs securely. The role leads three core functions: product security, embedded in R&D teams, cloud and infrastructure security across AWS, and AI security. It also owns security architecture standards, vulnerability management, and edge security. Reports to the CISO.\nResponsibilities:\nProduct security\nLead product security: threat modeling, design review, and the release gate. The team works inside R&D teams on a dotted line.\n\nApprove standard product launches and own pen test and bug bounty intake.\n\nCloud and infrastructure security\nLead cloud and infrastructure security: IAM, AWS guardrails, infrastructure as code, patch policy, secrets rotation, and privileged and non-human access.\n\nOwn the WAF standard and approve WAF rule changes and patch window changes\n\nAI security\nLead AI security: set security standards for AI features, agents, and AI services that Instructure builds or integrates.\n\nDefine controls for prompt injection, excessive agent permissions and tool abuse, data leakage, and unauthorized access through RAG and connectors.\n\nSet intake and risk review for third-party AI services, and manage shadow AI risk with GRC.\n\nInclude AI-specific risks in threat modeling, design review, and the release gate.\n\nWork with the Security Architect on AI reference patterns, and with GRC on AI governance and risk.\n\nArchitecture, vulnerability management, and delivery\nSet security architecture and design standards, working through the Security Architect.\n\nOwn vulnerability management: Wiz across code and cloud, SLAs by team, exceptions, and disputes. Set secure SDLC standards and release criteria, including code scanning gates, with the Security Platform and Vulnerability Management Lead.\n\nSupport customer security reviews as the technical expert, working with GRC.\n\nDeliver the Security Engineering commitments in the plan, and track Engineering commitments with the VP of Engineering.\n\nHire, lead, and grow the team, and write job descriptions for the team's roles.\n\nSuccess measures\nNew in-scope features, including AI features, get a security design review before release.\n\nVulnerability SLA performance reported to Engineering leaders monthly, with overdue items escalated to the owning VP.\n\nSecurity Engineering commitments delivered on the committed date.\n\nOpen Security Engineering roles filled on planned dates.\n\nSecurity Engineering spend managed to budget.\n\nProduct security coverage, remediation speed, and escaped defects reported quarterly.\n\nEvery team member has a written development plan, reviewed quarterly.\n\nQualifications\n10+ years in security engineering, including 5+ years leading security teams.\n\nHas led product security and cloud security teams, with hands-on depth in cloud environments.\n\nPractical knowledge of AI and LLM security risks, such as prompt injection, agent abuse, and data leakage, and of frameworks such as OWASP Top 10 for LLM Applications and NIST AI RMF.\n\nHas influenced senior Engineering leaders on design and risk trade-offs.\n\nExperience in SaaS, ideally handling regulated data such as education records (FERPA, COPPA).\n\nGet in on all the awesome at Instructure!\nWe offer competitive, meaningful benefits in every country where we operate. While they vary by location, here's a general idea of what you can expect:\nCompetitive compensation, plus all full-time employees participate in our ownership program - because everyone should have a stake in our success.\n\nFlexible work culture. Our remote, hybrid and in-office collaboration spaces vary by role, team and location.\n\nGenerous time off, including local holidays and our annual “Dim the Lights” period in late December, when teams are encouraged to step back and recharge based on departmental needs.\n\nComprehensive wellness programs and mental health support\n\nLearning and development resources, including professional development tools and tuition reimbursement, to support your growth\n\nThe technology and tools you need to do your best work\n\nMotivosity employee recognition program\n\nA culture rooted in inclusivity, support, and meaningful connection\n\nWe believe in hiring great people and treating them right. The more diverse we are, the better our ideas and outcomes.\nInstructure is an Equal Opportunity Employer. We comply with applicable employment and anti-discrimination laws in every country where we operate.\nAll employees must pass a background check as part of the hiring process. To help protect our teams and systems, we’ve implemented identity verification measures. Candidates may be asked to verify their legal name, current physical location, and provide a valid contact number and residential address, in accordance with local data privacy laws.\nAny attempt to misrepresent personal or professional information will result in disqualification.","description_format":"text","description_chars":5303,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Professional development","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["EdTech Platforms","E-learning","Learning Management Systems"],"lifecycle":[{"event":"open","at":"2026-11-03T21:21:18Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":4,"green_card_filings_12m":0,"median_offered_wage_usd":202500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":41,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":225000,"is_top_pay":false},"html_url":"https://alion.io/job/instructure-director-security-engineering","json_url":"https://alion.io/job/instructure-director-security-engineering.json","meta":{"generated_at":"2026-11-04T10:06:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15690,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6996},"rest":"https://alion.io/mcp/rest/get_company?id=6996"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finstructure-director-security-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finstructure-director-security-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finstructure-director-security-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/instructure-director-security-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finstructure-director-security-engineering"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3706692}},{"tool":"search_jobs","arguments":{"company":"instructure.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3706692},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}