{"id":3913226,"url":"https://alion.io/job/stellarus-vp-product-security","title":"VP, Product Security","company":{"id":4471095,"name":"Stellarus","domain":"stellarus.com","url":"https://alion.io/company/stellarus","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Oakland, United States","Long Beach, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"Platform Engineering","optional":false},{"name":"SBOM","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-15T15:44:17Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-11-07T14:11:49Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":23},"description":"Your Role\nThe Commercial Product Security organization is responsible for ensuring that security is embedded throughout the lifecycle of Stellarus commercial products, platforms, and technology services. The Vice President, Product Security will establish and lead the enterprise product security strategy, governance framework, and operating model to protect Stellarus commercial products, customer data, and digital ecosystems while enabling innovation and business growth.\nThis executive leader will partner closely with Product, Engineering, Risk Management, Privacy, Compliance, and Legal business leaders to build secure-by-design capabilities that scale across Stellarus' portfolio of healthcare technology solutions. The role will oversee product security engineering, application security, cloud security, DevSecOps, vulnerability management, security architecture, and product security governance programs.\nOur leadership model is about developing great leaders at all levels and creating opportunities for our people to grow - personally, professionally, and financially. We are looking for leaders that are energized by creative and critical thinking, building and sustaining high-performing teams, getting results the right way, and fostering continuous learning.\nYour Work\nIn this role, you will:\nEstablish and execute the enterprise commercial Product Security vision, strategy, and multi-year roadmap aligned with Stellarus business objectives, technology priorities, customer commitments, and product growth strategy.\nBuild and lead a high-performing Product Security organization focused on security engineering excellence, scalable product security practices, operational rigor, and measurable risk reduction.\nPartner with Product Management, Engineering, Architecture, Compliance and Platform teams to embed security requirements into the product development lifecycle.\nDrive adoption of secure-by-design and secure-by-default principles across all products, platforms, APIs, cloud services, and technology solutions.\nDefine and govern technical product security requirements across authentication, authorization, identity, API security, encryption, key management, secrets management, tenant isolation, secure configuration, logging, abuse prevention, and data protection.\nOversee application security, cloud security, DevSecOps, software supply chain security, threat modeling, penetration testing, and vulnerability management programs.\nEstablish cloud-native product security standards for infrastructure-as-code, containers, Kubernetes, serverless architectures, CI/CD pipelines, cloud identity, network segmentation, workload protection, runtime security, and continuous control monitoring.\nDrive security automation across the software delivery lifecycle, including SAST, DAST, SCA, IaC scanning, container image scanning, secrets detection, SBOM generation, artifact signing, policy-as-code, CI/CD security gates, and automated vulnerability triage.\nLead security assessments and reviews for new products, strategic initiatives, acquisitions, partnerships, and technology implementations.\nDevelop enterprise-wide product security metrics, reporting, and executive dashboards that provide visibility into risk posture, security maturity, and program effectiveness.\nPartner with Legal, Privacy, Compliance, Internal Audit, and Risk Management teams to ensure alignment with applicable regulatory requirements and industry standards.\nChampion security automation and continuous monitoring capabilities that improve efficiency and reduce organizational risk.\nRepresent Product Security in executive leadership forums, customer engagements, regulatory discussions, and industry events as needed.\nFoster a culture of security awareness, accountability, and continuous improvement across the technology organization.\nManage product security budgets, investments, vendor relationships, and strategic initiatives to maximize business value and risk reduction.\nRequired Knowledge and Experience\n(Bachelor’s degree in Computer Science, Engineering, or a related technical field) or (18+ years of relevant experience (as shown below) in lieu of a degree).\n12+ years of relevant experience in information security, cybersecurity, product security, application security, cloud security, software engineering security, or related disciplines, with a proven track record of leading enterprise-scale security programs and technical organizations.\n7+ years of leadership experience leading managers and/or large-scale security organizations, with a proven track record of building high-performing teams and developing talent.\nAt least one industry standard certification e.g., CISSP, CISM or CCSP\nProven executive leadership experience developing and scaling enterprise Product Security programs in complex, highly regulated environments.\nDeep expertise in secure software development lifecycle (SSDLC), application security, DevSecOps, cloud security, API security, and software supply chain security.\nStrong understanding of modern cloud platforms, microservices architectures, containerized environments, and platform engineering practices.\nExperience implementing and operationalizing security frameworks and standards such as NIST CSF, NIST SSDF, ISO 27001, CIS Controls, SOC 2, and OWASP.\nDemonstrated success integrating security into agile and product-centric operating models.\nStrong knowledge of threat modeling, vulnerability management, penetration testing, code analysis, and secure architecture review methodologies.\nExperience managing security risks associated with customer-facing products, digital platforms, APIs, and cloud-native applications.\nProven ability to translate business strategy into actionable security roadmaps, investment plans, and measurable outcomes.\nStrong financial and operational acumen, including experience managing budgets, prioritizing investments, and optimizing organizational performance.\nExcellent communication, stakeholder management, and executive presentation skills with the ability to influence technical and non-technical audiences.\nExperience collaborating with executive leadership, boards, customers, regulators, and external auditors.\n\nPreferred Knowledge and Experience\nExperience in healthcare, health plans, healthcare technology, payer/provider ecosystems, or other highly regulated industries.\nExperience securing SaaS platforms, healthcare data products, AI/ML solutions, and cloud-native digital services.\nFamiliarity with healthcare regulatory requirements including HIPAA, HITRUST, CMS regulations, and emerging healthcare cybersecurity guidance.\nExperience leading product security programs supporting commercial software products and enterprise platforms.\nProfessional certifications such as CISSP, CISM, CCSP, CSSLP, GIAC, or equivalent.\nAdvanced degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related field.\nExperience serving as a security executive, security officer, or equivalent leadership role in a technology-driven organization.","description_format":"text","description_chars":7054,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":7,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-11-07T09:14:32Z"}],"visa":[],"liveness":{"score":62,"band":"ok","label":"Likely open","p_open":1,"p_active":0.821,"p_room":0.75,"age_days":23,"expected_fill_days":29,"reasons":["conf:8","win:late"],"computed_at":"2026-11-07T22:18:23Z"},"pay":null,"html_url":"https://alion.io/job/stellarus-vp-product-security","json_url":"https://alion.io/job/stellarus-vp-product-security.json","meta":{"generated_at":"2026-11-07T22:18:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36588,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4471095},"rest":"https://alion.io/mcp/rest/get_company?id=4471095"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstellarus-vp-product-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstellarus-vp-product-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstellarus-vp-product-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stellarus-vp-product-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstellarus-vp-product-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3913226}},{"tool":"search_jobs","arguments":{"company":"stellarus.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3913226},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}