Director of Product Security

Whoop
Boston
Workplace: OnsiteFull timeUSD 220,000 - 270,000 annuallyFunction: Executive & General ManagementSkills: ["Leadership","Communication","Interpersonal skills","Mentorship","Team collaboration"]

Lead product security across WHOOP’s software organization by building and scaling multiple security engineering teams. Own product-facing security strategy, roadmap, and architecture standards covering member authentication, secure SDLC, privacy by design, threat modeling, and vulnerability management. Implement and mature DevSecOps tooling and security controls (SAST/SCA, container and infrastructure scanning, secrets detection, and CI/CD security checks). Partner with product, legal, compliance, and the CISO office to improve the company’s security posture.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Whoop
Whoop
1 week ago

Director of Product Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 8 hours agoStatus: Live

Job Summary

Lead product security across WHOOP’s software organization by building and scaling multiple security engineering teams. Own product-facing security strategy, roadmap, and architecture standards covering member authentication, secure SDLC, privacy by design, threat modeling, and vulnerability management. Implement and mature DevSecOps tooling and security controls (SAST/SCA, container and infrastructure scanning, secrets detection, and CI/CD security checks). Partner with product, legal, compliance, and the CISO office to improve the company’s security posture.
Location: Boston
Workplace: Onsite
Employment Type: Full time
Job Function: Executive & General Management
Seniority: Director level

Key Responsibilities

  • •Build, lead, and grow multiple engineering teams executing product-facing security strategy, including member authentication, code security, cloud security across AWS accounts, privacy by design, and threat modeling.
  • •Lead application vulnerability management programs covering bug bounties, code vulnerabilities, container vulnerabilities, and infrastructure vulnerabilities.
  • •Build, integrate, and mature DevSecOps tooling and developer security controls such as SAST, SCA, container scanning, secrets detection, CI/CD security checks, and secure-by-default workflows.
  • •Define and communicate long-term product security strategy, product architecture standards, and design principles for product-facing systems.
  • •Establish and enforce secure software development best practices, standards, and processes across testing and deployment; partner with engineering, the office of the CISO, and compliance to embed privacy and security by design.

Pay and Benefits

Salary: USD 220,000 - 270,000 annually
Equity and Bonus:Equity

Key Requirements

  • •Demonstrated success scaling a security team while establishing clear, efficient team domains.
  • •Proven experience as a technical leader managing multiple teams or growing a security engineering organization.
  • •Experience growing individual contributor career growth at the staff level or higher.
  • •Deep understanding of product security principles including vulnerability management, data privacy, threat modeling, secure SDLC, and secure-by-default engineering patterns.
  • •Experience building or integrating developer security tooling to improve secure-by-default practices.
Experience:Product securityDevSecOpsCloud securityVulnerability managementSecurity engineering
Skills:LeadershipCommunicationInterpersonal skillsMentorshipTeam collaboration
Tech Stack:AWSDevSecOpsSASTSCAContainer scanningSecrets detectionCI/CDThreat modelingSecure SDLCSecure-by-default

Company Brief

Whoop
Whoop designs and sells a subscription-based wearable fitness tracker and analytics platform that monitors recovery, strain, and sleep to optimize athletic performance and daily health for consumers and professional athletes.
Industry: Wearables
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series E+
Headquarters: Boston, United States
Founded: 2012
WebsiteLinkedIn