Abnormal Security
Director of Security Engineering
$214K–$308K
Remote - USA · Remote · Director · Full-time · Posted Oct 6, 2026
- Experience
- 10+ years in security or software engineering, including 4+ years managing security teams; ideally includes managers of managers or equivalent scope.
About the job
Leads Abnormal Security’s Security Engineering organization, setting its technical strategy and programs while serving as the CISO’s deputy and representing security to executives, customers, and regulators.
What you'll do
- Lead and develop managers and senior engineers across Security Engineering and Security Operations; oversee hiring, performance, promotions, and succession planning.
- Own the security engineering roadmap across cloud security, detection and response, identity, vulnerability management, and secure-by-default platforms.
- Drive cross-functional security programs and communicate technical risk and strategy to executives, the board, customers, and auditors.
What they ask for
- 10+ years in security or software engineering, including 4+ years managing security teams.
- Software engineering background with experience shipping production software.
- Record of building and scaling high-performing security teams.
- Technical fluency in cloud-native environments, including AWS organizations and multi-account governance, Kubernetes, identity and access, detection engineering, and modern SDLC security.
Nice to have
- Experience in compliance-driven environments such as FedRAMP, SOC 2, or ISO 27001.
- Experience securing AI/ML systems or governing AI adoption at scale.
Pay
$214,200 — $308,000 USD (base salary)
Tools
AWS, Kubernetes, FedRAMP, SOC 2, ISO 27001, AI/ML
AI focus
Drive AI security governance and cross-functional programs; experience securing AI/ML systems or governing AI adoption at scale is a strong signal. The company also uses AI-assisted recruiting tools to help prepare interview questions; they do not make hiring decisions or screen candidates automatically.
Model-written summary · the original posting is authoritative