Director, Product Security

Gainsight is an AI-powered customer success platform that orchestrates the customer journey from onboarding to advocacy, trusted by over 2,000 companies. The CustomerOS platform focuses on retention, growth, and driving customer learning, adoption, and community connection.

• 13+ years in Software Engineering, Security Engineering, Application Security, or Product Security
• At least 7 years leading security organizations
• Proven experience building or scaling Product Security programs in SaaS or cloud-native environments
• Expertise in Secure SDLC, Secure by Design, threat modeling, security architecture, application security, API security, authentication, and authorization frameworks
• Strong understanding of cloud-native architectures, microservices, Kubernetes, containers, and multi-tenant SaaS platforms
• Experience driving vulnerability management and product risk remediation programs
• Ability to communicate technical risk to executive leadership
• Experience building and leading high-performing Product Security teams

Nice to have:

• Experience securing AI/GenAI-powered products
• Hands-on software engineering background with distributed systems experience
• Experience with security automation in CI/CD environments
• Experience leading globally distributed Product Security teams
• Security certifications such as CISSP, CSSLP, or GIAC

• Mature the application security program
• Increase test coverage including monitoring through SAST, DAST, SCA, and container scanning tools
• Monitor security gates pass/fail ratios for automated deployment blocking
• Manage a global team of product security engineers

This role may require occasional travel up to 10-25%.

Informujemy, że administratorem danych jest Gainsight (Northpass Poland Sp. z o.o.) z siedzibą we Wrocławiu, ul. Marii Curie - Skłodowskiej 12. Podanie danych jest obowiązkowe w zakresie wynikającym z Kodeksu pracy. Odmowa podania danych może skutkować brakiem możliwości przeprowadzenia procesu rekrutacji. Zgoda na przetwarzanie danych może zostać wycofana w dowolnym momencie.