Sr. Director, Cybersecurity

We are Bugcrowd. Since 2012, we've been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd. Job Overview We specifically seek a hands-on, technical security leader. You bring experience building security monitoring, reference architectures, deploying tools, integrating platforms, assessing modern cloud-native applications and infrastructure - and leading teams executing that mission successfully. Responsibilities Define the Cyber Security Strategy for Bugcrowd and identify areas of improvements to the threat landscape, internal risk tolerance objectives, and/or compliance objectives. Ensure the technical aspects of vendor acquisitions and tools are safe for Bugcrowd's use, in unison with the IT and compliance teams. Assess corporate technology systems, determine strategy for changes, enhancement and improvements; recommend and implement the same, from the perspective of cyber security. Carry out and fulfill the cyber security strategy of Bugcrowd, proactively improving the security posture with time. Work with GRC to assist in designing, develop, implement and coordinate areas of policies and procedures for compliance with SOC-2, NIST 800-53v4, ISO27001, ISO27018, and FedRAMP. Represent Bugcrowd in the internal and external audits for SOC-2, ISO27001, and ISO27018. AppSec and Product Security Leadership Manage Bugcrowd's bug bounty program, ensuring that clients have a standard to aspire to, when running their own bounty programs. Analyze new features prior to development or launch, to ensure the security measures in place are sufficient for the project. Manage the access controls for Bugcrowd's production codebase. Approve and analyze authorization requests to production data. Perform regular audits of Bugcrowd's cloud infrastructure, alongside helping with architecture of any cloud solutions from the security perspective. Security Operations, Detection and Incident Response Perform IR for all parts of the business and perform root cause analysis upon the incidents to properly mitigate them in the future. Perform threat intelligence to proactively find issues relating to Bugcrowd's security posture. Plan implementation of security controls, in unison with the required teams. Monitor the security controls for all of Bugcrowd's systems and build a team to do the same. Management and Team Leadership Perform table top exercises within the Bugcrowd organization to ensure the organization is prepared for future threats. Aid with business continuity testing, since the internal cybersecurity team plays a major role within the process. Present findings and observations to the ISMS committee. Requirements Proven work experience leading Cyber Security in a startup and growing with the organization. Excellent knowledge of technical security controls, including cloud, web application, infrastructure, IT, and compliance. Experience in data governance, data architecture, data flow and system architecture to optimize the same. Hands-on experience with penetration testing, red teaming, and security patch bypass testing. Ability to work independently and must have strong organizational and communication skills. Bugcrowd is committed to the full inclusion of all qualified individuals. We will take the steps to assure that people with disabilities are provided reasonable accommodations. Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. #J-18808-Ljbffr