Director of Cyber Security

Concord Office · Remotefull timeRemote

Apply on Employer Site

senior

H1B: no

Kayak Director of Cyber Security at Kayak leading a global team of security engineers and setting direction for technical security programs. Responsible for partnering with senior leadership, managing security operations, and supporting team growth.

Responsibilities

Partner with the CISO and other senior teammates to define and execute the organization’s cyber security strategy, roadmap, and operating model, ensuring security initiatives are measurable, operationally actionable, and aligned with business priorities.
Lead, mentor, and support a global team of security engineers across multiple disciplines, including incident response, vulnerability management, identity and access management and application security.
Own the day-to-day operations of the security program — including threat detection and response, vulnerability management, and endpoint security — and ensure the team has the support and clarity needed to execute effectively.
Partner with engineering, infrastructure, and product teams to embed security into how we build and operate systems.
Manage vendor relationships and contribute to budget planning for security tooling and services.
Support the hiring, onboarding, and career development of your team members, fostering a culture of learning, collaboration, and continuous improvement.
Explore and champion the use of AI and automation to improve how the team operates — this is an active area of investment for us.
Evaluate emerging threats and technologies, including the security implications of artificial intelligence and other new capabilities.
Please apply if you have:
10 or more years of progressive experience in cybersecurity or a closely related field, including significant people-leadership experience.
Demonstrated success building or maturing security programs in a complex, technology-driven environment.
Strong experience across multiple security domains — such as security operations, incident response, vulnerability management, IAM, cloud security, application security, or security architecture.