Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 117 days ago

Director of Security Engineering

Sysdig32 open roles

Pay
$186,000 – $256,000 a year
Where
Flexible - USA
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDirector of Security EngineeringSysdig · Flexible - USA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Sysdig's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Sysdig postings stay open a median of 50 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 117 days ago

Sysdig median: 50 days open

The posting

At Sysdig, we believe cloud security isn't a compromise - it's a promise. From the start, our mission has been clear: to help organizations secure innovation in the cloud, the right way.

We created Falco, the open standard for cloud threat detection, and continue to lead the cloud security market with runtime insights, open innovation, and agentic Al. Creators of technology trusted by over 60% of the Fortune 500, Sysdig gives teams the real-time clarity to move fast and defend what matters most.

Culture matters here. We believe diversity fuels stronger ideas, and open dialogue drives sharper decisions. Recognized as a Best Place to Work and one of Deloitte's fastest-growing companies for the past 5 years, we're here to raise the standard for what cloud security and workplace culture should be.

If you have the passion to dig deeper, the desire to challenge convention, and the curiosity to build something better, Sysdig is the right place for you.

What you will do

  • Own security engineering end-to-end. Set the roadmap, standards, and budget for the function. Act as final decision-maker on tooling and practice.
  • Build and grow the team. Hire senior and staff security engineers, set their technical direction, and stay close enough to the code to be credible with the engineers you're asking to change how they work.
  • Own product and platform security. Threat model the cloud defense platform and our AI workload protection products. Build secure-by-default primitives engineers build on rather than around. Drive vulnerability management measured by closure, not ticket volume.
  • Harden production as code. Secrets and workload identity, Kubernetes and multi-cloud hardening delivered through Terraform and CI/CD rather than documentation. Run detection and response in our own environment, on our own telemetry.
  • Build agentic continuous pentesting with humans in the loop where humans are better — agent-driven adversarial validation integrated with specialized human pentesting through our partner network. You define where agents are trusted, where they aren't, and how findings feed detection coverage.
  • Own attack enumeration, detection coverage, and validation as measured disciplines rather than as an annual engagement ending in a PDF.
  • Rebuild how compliance works here. We maintain ISO 27001, ISO 27701, and SOC 2 Type II, and we're moving entirely off point-in-time assessments. Build continuous assurance: controls that report their own state, evidence generated as a pipeline output, validation running continuously against production.
  • Make AI-assisted development safe at our scale. Define what coding agents can touch, what they can commit, and how you'd know if one were subverted by an insider, an external actor, or another agent.
  • Use agents to scale the security function itself — triage, control validation, evidence generation, detection authoring. If a security task is repeatable, it should run without the team.
  • Build the security champions program across both classical security, and AI security, As a means of scaling and increasing velocity of security across the engineering organization.
  • Shape the product roadmap as customer zero. Use new capabilities in production before customers do, then work directly with product on what to build, shape, or stop.
  • Represent security externally. Engage major customers on matters of significance, and publish and speak on the work — encouraged, resourced, and supported.

What you will bring with you

  • Have 8+ years in security or software engineering, including 4+ years leading and developing engineers, with real ownership of a team's roadmap, outcomes, and budget
  • Have genuine depth in at least two of the four pillars, with working knowledge of all four — we'd rather have real expertise in product and offensive security than a survey of everything
  • Have shipped security as code: Terraform or OpenTofu, controls enforced in pipelines, cloud and Kubernetes security at the architectural level rather than the dashboard level
  • Have run detection and response for real, as the person on the escalation path rather than above it
  • Are already building with agentic tooling and have opinions about where it fails
  • Would rather make the secure path the easiest path than enforce it through policy — most of the impact here comes through partnership with Engineering and Product, not mandate
  • Are credible with a customer's CISO and with your own engineers, without changing register much between them
  • Are energized rather than unsettled by problems where established principles don't fully apply

What we look for

  • Built a security function that didn't exist before, at a company where much of it was theirs to define
  • Experience with capable adversaries — APT actors or other sophisticated cyberoffensive groups
  • Built or run agent-driven offensive tooling, or automated vulnerability discovery and remediation at scale
  • Worked on AI governance frameworks — ISO 42001, the EU AI Act, NIST AI RMF — as an engineering problem rather than a documentation exercise
  • A track record of conference speaking, published research, or open-source contribution

When you join Sysdig, you can expect

  • Extra days off to prioritize your well-being
  • 401(k) Retirement Savings Plan with a 3% company match
  • Maternity and Parental Leave
  • Mental health support for you and your family through the Modern Health app
  • Full health benefits package for you and your family

The U.S. annual salary range for this full-time position is between 186,000 and 256,000 USD/year. Actual offers may be higher or lower than this range based on a variety of factors, including your work location, job-related experience and education.

We would love for you to join us! Please reach out even if your experience doesn't perfectly match the job description. We can always explore other options after starting the conversation. Your background and passion will set you apart, especially if your career path is different.

Sysdig values a diverse workplace and encourages women, people of color, LGBTQIA+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply. Sysdig is an equal-opportunity employer. Sysdig does not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity, or any other legally protected status.

#LI-FP1

#LI-Remote

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Sysdig's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Sysdig's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Sysdig's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.