# Sr. Director, Security Engineering **Company**: Pinterest **Location**: Palo Alto, San Francisco, CA **Work arrangement**: hybrid **Experience**: executive **Job type**: full-time **Salary**: $329,585-$576,774 USD **Category**: Engineering **Industry**: Technology **Apply**: https://job-boards.greenhouse.io/pinterest/jobs/8157108?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_e5c39ff9-1ca ## Description Pinterest is looking for a Senior Director of Security Engineering to serve as the CISO's operating partner and lead the engineering execution for the entire Product and Cloud Security areas of its information security program. The successful candidate will own approximately two-thirds of Pinterest's entire information security program: a team of 40+ engineers organized across five direct reports, and a scope that spans from secure product development and platform controls to privacy-by-design architecture and AI security. Key responsibilities include: - Owning the end-to-end security engineering organization spanning product security, application security, identity and access management, vulnerability management, security architecture, supply chain and AI/product-risk controls, and cloud infrastructure security. - Defining and driving Pinterest's multi-year security engineering roadmap; translating risk appetite and policy into executable, measurable engineering programs across product and infrastructure lifecycles. - Serving as the executive owner of threat modeling, secure design review, and developer security enablement , embedding security as a first-class capability within Pinterest's engineering culture. - Partnering closely with VP-level engineering, product, and infrastructure leaders and teams to seamlessly integrate security into the software development lifecycle. - Leading Pinterest's security privacy engineering function as a product-grade capability: privacy-by-design systems, data inventory and classification, consent and preference controls, data lifecycle and deletion. - Driving the maturation of privacy engineering beyond compliance response , building reusable, scalable engineering primitives that make privacy-preserving development faster and safer across Pinterest's product surface area. - Championing and evangelizing foundational security platforms and libraries to ensure a secure production and data infrastructure. - Owning Cloud Governance: leading cloud security posture and governance, defining and enforcing standards for IaC security, AWS resource provisioning, CI/CD pipeline security, and overall security policies. - Directing the maturation of the Security Compliance & Accountability platform, establishing and enforcing rigorous metrics across multiple focus areas. - Serving as the CISO's primary operating partner: synthesizing complex security and risk narratives into concise executive communications, investment cases, and evidence of risk reduction for senior leadership and the board. - Building deep, trusted partnerships with Engineering, Product, Legal/Privacy, Trust & Safety, IT, Internal Audit, and Data leadership , spending approximately 50% of time driving cross-functional alignment and execution. - Establishing a unified operating system for security and privacy engineering , aligning roadmaps, service levels, prioritization, and success metrics across all domains under ownership. - Building and strengthening a high-performing global leadership bench: mentoring and leading a high-performing team of senior staff security engineers and managers. - Shaping Pinterest's approach to AI security , spanning both the security of AI-powered product surfaces and the application of AI/ML to improve operational efficiency, and threat response. Requirements: - 15+ years of progressive experience in security engineering, with a career foundation in software engineering or security software engineering. - Demonstrated experience leading a large, multi-domain security engineering organization (30+ engineers) at a B2C consumer internet platform of comparable scale. - Deep, hands-on expertise in product security , secure design, application security, vulnerability management, and developer enablement. - Meaningful experience in privacy engineering as a technical discipline, not just a compliance function; familiarity with privacy-by-design architectures and data lifecycle engineering. - Proven track record managing large-scale security budgets and driving measurable, multi-year security programs from strategy through execution. - Experience managing geographically distributed teams and stakeholders in a global environment. - Fluency in cloud security architecture (AWS preferred), application and product security, identity and access management, privacy-preserving systems, and modern detection and response engineering. The role requires 1-2 days of in-office collaboration per week and is based in Palo Alto or San Francisco. The salary range is $329,585-$576,774 USD. ## Skills ### Required - security engineering - software engineering - product security - cloud security - privacy engineering - identity and access management - vulnerability management - threat modeling - secure design - application security ### Nice to have - AWS - cloud security architecture - privacy-by-design architectures - data lifecycle engineering - AI security --- Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/pinterest/jobs/8157108?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)