{"id":90638,"url":"https://alion.io/job/sysdig-director-of-security-engineering","title":"Director of Security Engineering","company":{"id":34889,"name":"Sysdig","domain":"sysdig.com","url":"https://alion.io/company/sysdig","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":169000,"max_usd":303000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":663},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"EU AI Act","optional":false},{"name":"Falco","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"Kubernetes","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OpenTofu","optional":false},{"name":"SOC 2","optional":false},{"name":"Sysdig Secure","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-07-02T07:51:05Z","employer_posted_date":"2026-07-02","last_verified_at":"2026-10-20T11:41:30Z","board_verified":true,"closed_at":null,"days_open":110,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":110},"description":"At Sysdig, we believe cloud security isn't a compromise - it's a promise. From the start, our mission has been clear: to help organizations secure innovation in the cloud, the right way.\nWe created Falco, the open standard for cloud threat detection, and continue to lead the cloud security market with runtime insights, open innovation, and agentic Al. Creators of technology trusted by over 60% of the Fortune 500, Sysdig gives teams the real-time clarity to move fast and defend what matters most.\nCulture matters here. We believe diversity fuels stronger ideas, and open dialogue drives sharper decisions. Recognized as a Best Place to Work and one of Deloitte's fastest-growing companies for the past 5 years, we're here to raise the standard for what cloud security and workplace culture should be.\nIf you have the passion to dig deeper, the desire to challenge convention, and the curiosity to build something better, Sysdig is the right place for you.\nWhat you will do\nYou'll own security engineering across four pillars - product security, production security, offensive security, and assurance engineering - and you'll build two programs from nothing: agentic continuous pentesting integrated with specialized human testing, and a security champions program covering both classical and AI security.\nThis role is Sysdig's customer zero, and we mean that operationally rather than rhetorically. You'll run our security program on our own technology, starting with the headless expression of Sysdig Secure and the products we're building to protect AI workloads. You'll sit with the product team on roadmap direction, with as much influence as you're willing to take.\nThe Office of the CISO operates transparently, and we want our security team publishing and speaking, so the work you do here becomes work the industry can use - with a real production environment to cite and a product you helped design as the evidence.\nOwn security engineering end-to-end. Set the roadmap, standards, and budget for the function. Act as final decision-maker on tooling and practice.\nBuild and grow the team. Hire senior and staff security engineers, set their technical direction, and stay close enough to the code to be credible with the engineers you're asking to change how they work.\nOwn product and platform security. Threat model the cloud defense platform and our AI workload protection products. Build secure-by-default primitives engineers build on rather than around. Drive vulnerability management measured by closure, not ticket volume.\nHarden production as code. Secrets and workload identity, Kubernetes and multi-cloud hardening delivered through Terraform and CI/CD rather than documentation. Run detection and response in our own environment, on our own telemetry.\nBuild agentic continuous pentesting with humans in the loop where humans are better - agent-driven adversarial validation integrated with specialized human pentesting through our partner network. You define where agents are trusted, where they aren't, and how findings feed detection coverage.\nOwn attack enumeration, detection coverage, and validation as measured disciplines rather than as an annual engagement ending in a PDF.\nRebuild how compliance works here. We maintain ISO 27001, ISO 27701, and SOC 2 Type II, and we're moving entirely off point-in-time assessments. Build continuous assurance: controls that report their own state, evidence generated as a pipeline output, validation running continuously against production. \nMake AI-assisted development safe at our scale. Define what coding agents can touch, what they can commit, and how you'd know if one were subverted by an insider, an external actor, or another agent.\nUse agents to scale the security function itself - triage, control validation, evidence generation, detection authoring. If a security task is repeatable, it should run without the team.\nBuild the security champions program across both classical security, and AI security, As a means of scaling and increasing velocity of security across the engineering organization. \nShape the product roadmap as customer zero. Use new capabilities in production before customers do, then work directly with product on what to build, shape, or stop. \n Represent security externally. Engage major customers on matters of significance, and publish and speak on the work - encouraged, resourced, and supported.\nWhat you will bring with you\nHave 8+ years in security or software engineering, including 4+ years leading and developing engineers, with real ownership of a team's roadmap, outcomes, and budget\nHave genuine depth in at least two of the four pillars, with working knowledge of all four - we'd rather have real expertise in product and offensive security than a survey of everything\nHave shipped security as code: Terraform or OpenTofu, controls enforced in pipelines, cloud and Kubernetes security at the architectural level rather than the dashboard level\nHave run detection and response for real, as the person on the escalation path rather than above it\nAre already building with agentic tooling and have opinions about where it fails\nWould rather make the secure path the easiest path than enforce it through policy - most of the impact here comes through partnership with Engineering and Product, not mandate\nAre credible with a customer's CISO and with your own engineers, without changing register much between them\nAre energized rather than unsettled by problems where established principles don't fully apply\nWhat we look for\nBuilt a security function that didn't exist before, at a company where much of it was theirs to define\nExperience with capable adversaries - APT actors or other sophisticated cyberoffensive groups\nBuilt or run agent-driven offensive tooling, or automated vulnerability discovery and remediation at scale\nWorked on AI governance frameworks - ISO 42001, the EU AI Act, NIST AI RMF - as an engineering problem rather than a documentation exercise\nA track record of conference speaking, published research, or open-source contribution\nWhen you join Sysdig, you can expect\nExtra days off to prioritize your well-being\n401(k) Retirement Savings Plan with a 3% company match\nMaternity and Parental Leave\nMental health support for you and your family through the Modern Health app\nFull health benefits package for you and your family","description_format":"text","description_chars":6363,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","DevSecOps","Security Operations"],"lifecycle":[{"event":"open","at":"2026-07-02T07:51:05Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 7 · green card filings: 5","filings_12m":7,"filings_prev_12m":19,"green_card_filings_12m":5,"median_offered_wage_usd":179583,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":1,"p_active":0.815,"p_room":0.36,"age_days":109,"expected_fill_days":72,"reasons":["conf:2","velocity","win:tail","crowd:"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/sysdig-director-of-security-engineering","json_url":"https://alion.io/job/sysdig-director-of-security-engineering.json","meta":{"generated_at":"2026-10-20T12:30:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13770,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":34889},"rest":"https://alion.io/mcp/rest/get_company?id=34889"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsysdig-director-of-security-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsysdig-director-of-security-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsysdig-director-of-security-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sysdig-director-of-security-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsysdig-director-of-security-engineering"}]}