Miro

Miro

Miro is an online, visual collaboration platform designed to unlock creativity and accelerate innovation among teams of all kinds. The platform’s infinite canvas enables teams to lead engaging workshops and meetings, design products, brainstorm ideas, ...

Internet Software & Services
1K-5K
Founded 2011
$476M raised

Description

  • Lead and mentor a globally distributed team of application security engineers and offensive security specialists.
  • Coordinate team initiatives and provide project management leadership across multiple workstreams.
  • Drive integration of security into Miro’s Discover, Define, Deliver lifecycle and AMPED operating model.
  • Partner with Product, Engineering, and Design on early-stage threat modeling, risk reviews, and abuse-case analysis.
  • Shape and improve Secure SDLC practices across CI/CD pipelines, infrastructure-as-code, and developer tooling.
  • Oversee bug bounty and third-party testing programs, including vulnerability triage, communication, and remediation.
  • Build and scale the Security Champions program across engineering teams.
  • Guide secure adoption of AI-augmented development tools and Agentic AI workflows.
  • Provide patterns, reference architectures, and structured guidance for secure, scalable, privacy-respecting features.
  • Define and report on KPIs and success metrics for secure development adoption and vulnerability resolution.
  • Collaborate with Privacy, Legal, and Compliance teams to align with regulatory requirements.
  • Foster a collaborative, learning-oriented, and continuously improving team culture.

Requirements

  • 10+ years of experience in software, application, or product security, including secure software development.
  • 3+ years of technical leadership or management experience in a security-focused role.
  • Experience with threat modeling methodologies such as STRIDE and PASTA.
  • Deep expertise in Secure Software Development Lifecycles (SSDLC), including agile and custom development frameworks.
  • Experience running Security Champions programs and scaling developer engagement.
  • Experience leading offensive security programs, including penetration testing, red teaming, or bug bounty.
  • Practical understanding of governance and assurance frameworks such as ISO 27001, SOC 2, and OWASP SAMM.
  • Familiarity with AI/LLM tooling such as Cursor, GitHub Copilot, or custom LLM integrations, and related security/governance considerations.
  • Experience working with AWS and securing API-driven, microservice-based architectures.
  • Ability to manage distributed teams and communicate effectively with technical and business stakeholders.

Benefits

  • Global benefits package that generally includes equity.
  • Wellbeing benefit.
  • WFH equipment allowance.
  • Annual Learning & Development stipend.
  • Supportive, collaborative global team environment.
  • Location-specific benefits may be available depending on where you work.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Program Manager, Marketplace Operations

Healthcare.com 11-50 Internet Software & Services

Healthcare.com is hiring a Program Manager, Marketplace Operations, to coordinate cross-functional initiatives across its healthcare marketplace business and keep teams aligned, accountable, and on schedule for critical enrollment deadlines.

JIRA Looker Snowflake SQL Tableau
3 hours, 32 minutes ago

Campaign Director

Sierra Club 251-1K Diversified Consumer Services

The Sierra Club seeks a remote Director of the Beyond Coal Campaign to lead an equitable transition from coal and gas to 100% clean energy through strategy, fundraising, resource deployment, and organizational leadership.

3 hours, 47 minutes ago

Off-Cycle Fall 2026 Cybersecurity Internship

Galaxy 251-1K Capital Markets

Galaxy Digital is seeking a remote Cybersecurity Intern for its Product Security team to improve secure engineering standards and develop resources that help software and production engineers apply them effectively.

C++ Cybersecurity Python Rust
4 hours, 32 minutes ago

Security Engineer - Product

Wiz 251-1K IT Services

Wiz is hiring a Security Engineer for Product & Production Infrastructure to secure its cloud-native products, CI/CD systems, and production environments through reviews, vulnerability management, and detection and response operations.

AWS Azure Go Helm Kubernetes Pulumi Python Terraform
1 day, 3 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers