Director, Product Security

If you run toward knowledge and problem-solving, join us

About NetApp

NetApp is the intelligent data infrastructure company, turning a world of disruption into opportunity for every customer. No matter the data type, workload or environment, we help our customers identify and realize new business possibilities. And it all starts with our people.

If this sounds like something you want to be part of, NetApp is the place for you. You can help bring new ideas to life, approaching each challenge with fresh eyes. We embrace diversity and openness because it's in our DNA. Of course, you won't be doing it alone. At NetApp, we're all about asking for help when we need it, collaborating with others, and partnering across the organization - and beyond.

"At NetApp, we fully embrace and advance a diverse, inclusive global workforce with a culture of belonging that leverages the backgrounds and perspectives of all employees, customers, partners, and communities to foster a higher performing organization."-George Kurian, CEO

Director, Product Security

Research Triangle Park, North Carolina, United States

Job category: Information Technology

Job ID: 127822-en_US

Job summary

Reporting to the Head of Product & Cloud Security, the Director of Product Security will be responsible for defining and upholding the highest standards of security within our product development lifecycle. This role involves maintaining accountability for our security posture, managing remediations, and developing a strategy to modernize our people, processes, and tools. The ideal candidate will possess a deep technical understanding of security principles and practices, along with a proven track record of leading security initiatives in a dynamic environment.

Job requirements

• Define Security Standards:
  • Establish and maintain comprehensive security standards and policies for product development.
  • Ensure these standards are integrated into the development lifecycle from design to deployment.
• Maintain Accountability for Security Posture:
  • Oversee the security posture of all products and ensure compliance with internal and external security requirements.
  • Implement and manage security metrics to measure and report on the effectiveness of security controls.
• Reporting on Security Posture:
  • Develop and deliver regular reports on the security posture of our products to senior leadership and other stakeholders.
  • Provide actionable insights and recommendations based on security assessments and metrics.
• Manage Remediations for Upcoming Releases:
  • Collaborate with cross-functional teams to identify, prioritize, and remediate security vulnerabilities in upcoming product releases.
  • Ensure timely and effective resolution of security issues to meet release deadlines.
• Manage People, Processes, and Tools:
  • Develop and execute a strategy to modernize the security capabilities of the organization, including people, processes, and tools.
  • Stay abreast of emerging security technologies and trends, and incorporate them into the security strategy.
• Deep Technical Expertise:
  • Provide technical leadership and guidance on security architecture, design, and implementation.
  • Conduct deep technical assessments and code reviews to identify and mitigate security risks.
• Collaboration and Communication:
  • Foster a culture of security awareness and collaboration across the organization.
  • Communicate complex security concepts to technical and non-technical stakeholders effectively.

Key qualifications

• Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• 10+ years of experience in information security, with a focus on product security.
• Proven experience in defining and implementing security standards and practices.
• Strong understanding and innovative approach secure software development lifecycle (SSDLC) principles.
• Experience with security assessment tools and methodologies.
• Excellent problem-solving skills and the ability to work under pressure.
• Strong communication and leadership skills.
• Relevant certifications such as CISSP, CISM, or CEH are a plus.

Compensation
The base salary range for this position is $213,000–$300,000 and will be determined by the candidate's location, qualifications, experience, and education. Final compensation packages are competitive and in line with industry standards, reflecting a variety of factors, and include a comprehensive benefits package.

Equal Opportunity Employer:

NetApp is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state and local laws that prohibit employment discrimination based on age, race, color, gender, sexual orientation, gender identity, national origin, religion, disability or genetic information, pregnancy, protected veteran status, and any other protected classification.