Whoop
Director, Security Engineering & Operations
$220K–$245K
Boston, MA · On-site · Director · Full-time · Posted Aug 28, 2026
- Experience
- 10+ years in information security; 5+ years of people leadership, including multiple years managing managers and senior technical individual contributors.
- Visa sponsorship
- The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. WHOOP participates in E-Verify to determine employment eligibility.
About the job
Leads WHOOP’s Security Engineering and Security Operations teams, shaping strategy, technical roadmaps, incident response, and security capabilities across the company.
What you'll do
- Set strategy, priorities, standards, and measurable outcomes for security engineering and operations; lead and develop managers, engineers, and analysts.
- Advance threat-informed detection and response, incident readiness, and preventive and detective controls across enterprise environments.
- Lead security strategy for AI-enabled products and enterprise AI adoption, and drive roadmap execution and security-partner accountability.
What they ask for
- 10+ years of information security experience, including deep Security Operations and meaningful Security Engineering experience in complex technology environments.
- 5+ years of people leadership, including multiple years managing managers and senior technical individual contributors.
- Deep expertise in detection engineering, SIEM and telemetry strategy, incident response, and modern security operations, including leading significant incidents.
- Experience managing MDR, MSSP, or similar security partners; experience securing AI-enabled products, enterprise AI adoption, or AI development environments.
Nice to have
- Experience in health technology or another sensitive-data environment.
Pay
$220,000-$245,000 USD base salary
Tools
SIEM, MDR, MSSP
AI focus
Leads security for AI-enabled products and enterprise AI adoption, covering access controls, sensitive data, model and application security, third-party integrations, tool and agent permissions, monitoring, auditability, and secure AI use.
Model-written summary · the original posting is authoritative