This job is closed
Applications are no longer available for this announcement. Explore current related opportunities below.
Job description
Senior Director, Security Operations & Platform Engineering (Confidential Search)
ABOUT THE OPPORTUNITY
Ramp Talent is partnering with a well-established, multi-brand online learning company with a high-volume e-commerce business. The company is hiring a Senior Director to own how software is built, shipped, and protected across its portfolio.
This leader will run two organizations: an established Security Operations and Information Security function, and a Platform Engineering and Developer Experience (DevEx) organization that you will build from the ground up. The goal is to give every engineer a secure, self-service, AI-augmented path to production on AWS.
We're looking for a hands-on, AI-first technology executive who has protected high-volume e-commerce environments, built a platform team around a clear North Star, and scaled strong organizations through great people leadership.
WHAT YOU'LL DO
Security Operations & Information Security
Build and lead SecOps: 24x7 detection and response, threat intelligence, vulnerability management, and incident command with clear SLAs and runbooks
Own the information security program, including risk management, policy, security architecture reviews, and audit readiness for PCI DSS, SOC 2, and privacy regulations (CCPA, GLBA, HIPAA)
Secure the e-commerce and payments surface: checkout, identity and account takeover, fraud and bot mitigation, WAF/edge protection, and vendor risk
Drive Zero Trust access, least-privilege identity controls, and company-wide secrets management
Apply AI to security operations (automated triage, AI-assisted detection engineering, agentic response) and set guardrails for safe use of AI and LLMs across the business
Platform Engineering & Developer Experience
Define the Platform North Star and DevEx metrics (DORA, lead time, change failure rate, MTTR, developer satisfaction) and hold the org accountable to them
Build an Internal Developer Platform with golden paths, self-service environments, and Terraform-based infrastructure-as-code so teams go from idea to production in hours, not weeks
Own CI/CD, observability, and SRE practices (SLOs, blameless post-mortems) across AWS workloads (ECS, Lambda, RDS, event-driven services)
Embed DevSecOps into the platform (scanning, SBOM, policy-as-code, secret detection) so the secure path is the default path
Partner with FinOps to make cloud cost efficiency a first-class platform outcome
Leadership
Champion an AI-first engineering operating model: AI-assisted coding, testing, incident resolution, and platform automation
Hire and develop managers and senior ICs across SecOps, Platform, SRE, and DevEx
Own budgets, vendor and tooling strategy, and ROI-driven investment cases
Report risk posture and platform health to executives and the board, and partner closely with Product, Data, and engineering leaders
WHAT YOU BRING
Required
15+ years in engineering, infrastructure, or security
7+ years leading multi-team organizations, including managers of managers and 30+ engineers
A track record running SecOps / InfoSec for a high-traffic e-commerce or digital commerce business, including PCI DSS and SOC 2 programs
Proven success building a platform engineering or DevEx team from the ground up, with measurable gains in delivery speed and reliability
Deep AWS expertise across security (IAM, GuardDuty, Security Hub, KMS, WAF), networking, containers, and serverless
An AI-first mindset: you use AI tools daily and have embedded AI into security and engineering workflows at scale
Preferred
Experience in EdTech, multi-brand, or regulated industries (financial services, healthcare)
CISSP, CISM, or AWS Security Specialty certification
HOW YOU OPERATE
Strong technologist: credible with principal engineers; can review architecture, threat models, and IaC and make sound calls under pressure
Builder and operator: balances strategy with execution and runs calm, decisive incident response
People leader: attracts and grows talent and builds accountable teams where security and DevEx are shared responsibilities
Executive communicator: translates technical risk and platform investment into clear business outcomes
WHAT SUCCESS LOOKS LIKE IN YEAR ONE
A measurable security posture baseline, reduced mean time to detect and respond, and clean PCI and SOC 2 audits
A published Platform North Star with golden paths adopted by most product teams and improved DORA metrics
A fully staffed, engaged leadership bench across SecOps and Platform, with AI embedded in daily operations
This is a confidential search. The company name will be shared with qualified candidates after an initial conversation with Ramp Talent. All inquiries are handled with discretion.
#J-18808-Ljbffr
Worksite address
pleasanton, CA, 94566, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.