Director of Security | Jobs at Airbnb

Apply on company website

Director of Security

San Francisco, CA

 

Airbnb seeks an outstanding engineering leader who is passionate about ensuring exceptional security and privacy for our users. In this role you will responsible for ensuring the security of all of Airbnb’s products. Ideal candidates learn and adapt quick to understand the business needs, envision a plan that makes creating secure software fun and sustainable, and deliver on that plan with a team of right people, process and technology.

 

This is an exciting new role for a strong leader with a deep security background and a strong sense of how the security ecosystem functions. The Director of Security will not only build a highly technical team of experts in diverse domains, but also engage participants throughout the company to care about the security of the products they create and depend on. This individual will report to the VP of  Engineering and work alongside Airbnb’s senior leadership team to advise on all decisions around security.

 

 

Responsibilities: 

 

• Attract, lead and retain an elite team of security software engineering specialists.

• Maintain and lead information security compliance with relevant standards and regulations as they apply across the company

• Create a compelling product security vision, set and advocate overall security priorities and publish an internal roadmap that includes SDLC initiatives, testing, HR and budget planning

• Implement architecture, design and threat model reviews and articulate security requirements 

• Evaluate commercial and open source tools.

• Coordinate 3rd party test vendors.

• Maintain a Vulnerability Management Program covering incident response triage, Responsible Vulnerability Disclosures.

• Research emerging security threats, vulnerability outbreaks, new test tools, techniques and designs methods.

 

Requirements:

 

• BA/BS in Computer Science or equivalent work experience.

• 8 -10+ years of security experience including hands-on technical management experience, coding and the ability to contribute both strategically and operationally.

• Proven ability to recruit and manage technical teams.

• Ability to develop and communicate information security related vision, strategy, plans, architecture, programs, and metrics.

• Ability to explain vulnerabilities, risks and design weaknesses to any audience.

• Strong written and verbal communication.

• Superior time management organizational skills and attention to detail.

• Ability to multitask and contribute to multiple projects.

• Familiarity with one or more information security compliance processes, such as PCI, HIPAA, NIST SP 800-53, or ISO 27001.

Apply Now