Director, Security Engineering

US-REMOTEfull timeRemote

Apply on Employer Site

senior

$200k–$225k

H1B: no

Instructure Director, Security Engineering at Instructure leads product security, cloud and infrastructure security, and AI security functions. The role sets security architecture standards, manages vulnerability and edge security, and leads a team reporting to the CISO.

Responsibilities

The Director, Security Engineering owns how Instructure builds and runs securely. The role leads three core functions: product security, embedded in R&D teams, cloud and infrastructure security across AWS, and AI security. It also owns security architecture standards, vulnerability management, and edge security. Reports to the CISO.
Product security
Lead product security: threat modeling, design review, and the release gate. The team works inside R&D teams on a dotted line.
Approve standard product launches and own pen test and bug bounty intake.
Cloud and infrastructure security
Lead cloud and infrastructure security: IAM, AWS guardrails, infrastructure as code, patch policy, secrets rotation, and privileged and non-human access.
Own the WAF standard and approve WAF rule changes and patch window changes
Lead AI security: set security standards for AI features, agents, and AI services that Instructure builds or integrates.
Define controls for prompt injection, excessive agent permissions and tool abuse, data leakage, and unauthorized access through RAG and connectors.
Set intake and risk review for third-party AI services, and manage shadow AI risk with GRC.
Include AI-specific risks in threat modeling, design review, and the release gate.
Work with the Security Architect on AI reference patterns, and with GRC on AI governance and risk.

Qualification

10+ years in security engineeringExperience in SaaS

Required

10+ years in security engineering, including 5+ years leading security teams.
Has led product security and cloud security teams, with hands-on depth in cloud environments.
Practical knowledge of AI and LLM security risks, such as prompt injection, agent abuse, and data leakage, and of frameworks such as OWASP Top 10 for LLM Applications and NIST AI RMF.
Has influenced senior Engineering leaders on design and risk trade-offs.
Experience in SaaS, ideally handling regulated data such as education records (FERPA, COPPA).
Get in on all the awesome at Instructure!

Benefits

Tuition
Wellness
Flexible Work

Company

Instructure

View company page

Source: ashby

Active within the past hour

Remote-friendly

More roles at Instructure

Senior Manager, Center of Excellence

US-REMOTE

Regional Vice President - Canvas - K12 - Southeast

United States · Remote

Accounts Payable Manager

US-REMOTE

L1 Support Engineer - Spanish Backup

US-REMOTE

Boost Your Interview Chances

Improve Resume Match Score

Free

Your Score

9.0

Strong Applicant

Must-Have Skills for This Role

Threat modelingDesign reviewPenetration testingBug bountyIAMAWS

Optimize my Resume

Apply Faster with Autofill

Free

Save your profile once. LumiJobs pre-fills the employer's application form so you stop re-typing the same answers on every site.

Apply With Autofill

Or skip LumiJobs's tools and submit directly on the employer's career site.

Apply on Employer Site

Director, Security Engineering at Instructure · LumiJobs