Head of Product Security (US) (M70)

Overview

Working at Atlassian

Atlassians can choose where they work – whether in an office, from home, or a combination of the two. That way, Atlassians have more control over supporting their family, personal goals, and other priorities. We can hire people in any country where we have a legal entity.

Responsibilities

Overview

The Atlassian Security Team's purpose is to build trust. We seek to lead our peers in cloud and product security, meet all customer requirements and exceed requirements for industry security standards and certifications. Do you believe an organization should be open and transparent about its programs, processes, and metrics? We do. This is why we share our journey and encourage other cloud providers to do the same.

We are looking for a Head of Product Security to partner with the broader Trust Organization and all of Atlassian, to shape our security posture, work across product teams, infrastructure organizations and security functions globally in a highly collaborative and engineering-driven environment to improve the security of both our Data Center and Cloud products, our infrastructure and our entire company. We are seeking an experienced and visionary security engineering leader who wants to join a team of highly talented security leaders and professionals who are revolutionizing the delivery of Atlassian platform to the world’s most critical organizations in a secure way. 

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

This position requires strong cross-organizational leadership, communication skills, deep technical security knowledge and being very hands-on with product designs, threat modeling, security reviews, vulnerability management and end-to-end security controls from a product and system infrastructure perspective.

Key Responsibilities 

Working with globally-distributed peer organizations, you will lead a team of security engineers and subject matter experts to:

• Collaborate with cross functional teams to define various security controls and translate them for engineering implementation for the Atlassian product teams.

• Develop and execute a comprehensive product security strategy that aligns with our core strategic objectives, and exceeds the high expectations set by our customers

• Partner with product development teams to embed security best practices and considerations across the entire development lifecycle, ensuring that new features meet the highest trust standards

• Collaborate with senior technical leadership across Atlassian infrastructure and IT teams to provide technical leadership to maintain compliance and adhere to different regulatory requirements.

• In partnership with engineering organization, design and deliver high-quality, low-cost automation to further the security mission.

• Drive our corporate teams and functions to use the latest security tools, techniques and methodologies to build secure products by default. 

Qualifications

Your background:

• At least 10+ years of multifaceted security leadership and management experience in a technology-centric company, including experience leading security teams of 15+ engineers and analysts in a globally distributed organization that services dozens of partners.

• Expertise in threat modeling and the associated frameworks (e.g. STRIDE, PASTA, FAIR, PHANTOM-B) coupled with the ability to lead and mentor across the organization on the key principles of threat modeling, secure design and implementation, as well as risk assessment.

• Understanding of compliance frameworks and their application to standards (e.g. SOC 2, HIPAA, GDPR, SOX , SOC 2, FedRAMP etc.), and associated controls.

• Demonstrated ability to develop a strategic approach to streamline product security processes and capabilities.

• Experience designing and deploying security controls across all security domains such as access management, data protection, vulnerability management, incident response and management, application security, network security, preventive, detective and offensive security solutions.

• Experience securing cloud based infrastructures; AWS, G-suite, Salesforce, etc

• Experience leading highly complex, org wide security change programs

• Outstanding interpersonal and communication skills including EQ, mentoring, coaching, collaborating, and team building; ability to influence both internally and externally, and to drive multi-functional alignment and action

• Experience in planning and driving direction autonomously - both as a hands-on security engineer, and as a leader

• Deep expertise in multiple areas and security disciplines where you can lead through your expertise

• Demonstrable experience in working effectively with scaled systems and different methods for maintaining a security posture

• Comfort in the level and speed of learning and ambiguity needed to navigate fast-evolving fields like AI

• Excellent oral and written communications skills and experience interacting with both business and Development/Engineering individuals at all levels including the executive level  

ProdSec Missions

We Define and Measure what makes a Product Area secure.

We Engage and Assess teams to help them improve the security of Atlassian Product Areas

We scale our capacity to deliver our mission by building and operating Mitigations and Solutions 

Security Development Lifecycle

Compensation

At Atlassian, we strive to design equitable, explainable, and competitive compensation programs. We follow consistent hiring practices and account for each candidate's skills, knowledge, and experience when setting base pay within the range.

Please visit go.atlassian.com/payzones for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter.

This role may also be eligible for benefits, bonuses, commissions, and equity.

Pay Ranges

In The United States, we have three geographic pay zones. For this role, our current base pay ranges for new hires in each zone are:

Zone A: $253,800 - $331,350

Zone B: $228,420 - $298,215

Zone C: $210,654 - $275,021

Qualifications

Benefits & Perks

Atlassian offers a wide range of perks and benefits designed to support you, your family and to help you engage with your local community. Our offerings include health and wellbeing resources, paid volunteer days, and so much more. To learn more, visit go.atlassian.com/perksandbenefits.

About Atlassian

At Atlassian, we're motivated by a common goal: to unleash the potential of every team. Our software products help teams all over the planet and our solutions are designed for all types of work. Team collaboration through our tools makes what may be impossible alone, possible together.

We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.

To provide you the best experience, we can support with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team during your conversation with them.

To learn more about our culture and hiring process, visit go.atlassian.com/crh.

In line with local law, identity verification (which may include use of biometric data) is a condition of employment with Atlassian for employment fraud purposes.