Senior Director, Product Security

Senior Director, Product Security

As the most trusted brand in our industry, Docusign recognizes the profound importance of maintaining and enhancing customer trust in our products. The Senior Director, Product Security leads all aspects of the Docusign Product Security program. The Senior Director will be a product focused, technically proficient leader who manages the development of products and features to provide for the security and trust of the platform. This role has responsibility for the secure software development lifecycle (SDLC) and continuous integration/continuous deployment (CI/CD) for products developed for customers as well as internal usage at Docusign.

The Senior Director and their team of security engineers and architects embed within Product, Technology, and Digital Technology teams to manage product development, security controls, and processes to ensure optimal security by design and default while supporting business objectives. The Senior Director will integrate leading security practices into all phases of product development including planning, design, implementation, testing, deployment and maintenance to proactively reduce vulnerabilities and broader risks. The role will oversee developer technical designs (e.g., secure coding criteria, architectural designs, developer libraries, code reviews, etc.), as well as SDLC and CI/CD processes, gating, and execution. In particular, the Senior Director will implement leading security practices directly into the software delivery pipeline, ensuring code integrity from development to production, and mitigate risks while performing automated scanning, testing, and compliance checks at every stage and remediation as required.

The Senior Director will implement contemporary, cost-effective tools and practices to maximize efficiencies while providing appropriate technical security rigor. They will leverage emerging tools, like AI guardrails and AI-native tools that provide code context reasoning, to protect against longstanding security risks (e.g., OWASP Top 10) and more sophisticated and developing threats (e.g., OWASP Top 10 for Agentic Applications). The Senior Director will lead a robust Security Champions program to scale security awareness, implement secure coding principles, and empower developer-led code reviews and risk mitigation where appropriate. They will work closely with Docusign's Red Team and PSIRT to proactively identify and remediate vulnerabilities and systemic risks. And they will provide deep, technical expertise in leading the Product Security team, advising senior leaders, and shaping the behaviors of cross-functional teams.

This position is a people manager role reporting to the Chief Information Security Officer.

Responsibility

• Manage product security from design through release and maintenance
• Embed with Product, Technology, and Digital Technology teams to oversee product and developer technical designs; manage SDLC and CI/CD processes, gating, and standards; and ensure Docusign products are secure
• Maintain deep technical expertise in components/capabilities of the product ecosystem
• Maintain deep technical expertise in security threats, trends, technologies, and industry best practices (existing and emerging)
• Manage efficient, effective security solutions aligned with business needs (e.g., support continuing improvements in automating CI/CD pipelines that leverage infrastructure as code with tools like Terraform plus containerization; e.g., support secure development of Intelligent Agreement Management within the Docusign platform plus secure development of AI capabilities for internal company usage of AI capabilities)
• Manage, lead, and train their team of security engineers and architects to implement and maintain a high performing product security program that implements best practices
• Implement contemporary tooling and automation to optimize insights, efficiency, and efficacy while enhancing technical security rigor
• Contribute to technical requirements, architectural design and modification, interface design documents, and educational resources
• Serve as a senior escalation point for complex or high risk vulnerabilities; drive architectural, process, and implementation improvements from lessons learned
• Build a high-performing, product-driven team focused on measurable outcomes and continuous improvement; implement tailored program goals, objectives, milestones, key results, and key performance indicators to drive consistent progress and outcomes
• Ensure products meet internal security standards, industry frameworks, and regulatory requirements
• Serve as a trusted leader/advisor to the CISO, other executives, and teams translating technical risk into business impact, providing clear updates, trade-offs, and advice
• Build collaboration and effective relationships with cross-functional teams to ensure frictionless security and paved path approaches with engineering leadership