Director, Defensive Security

The Dropbox Security team is seeking an experienced leader who will report to the Head of Security. The Security Director, Defensive Security is responsible for holistic threat prevention, detection and response for threats directed against Dropbox customers and business. This is a technical management role, requiring deep security knowledge and proven leadership and management skills. The position is closely involved in helping to mentor, develop and evaluate employee performance as well as helping with development and continuous improvement of the Security team. This role will strategically influence how we secure our customers and company, implement a multi-year strategy, provide necessary guidance and technical leadership to more junior engineers, and participate in sharing information with the company and senior leaders. A successful candidate will be able to balance constant evolving tactical needs with the ability to drive critical initiatives across the company and with our partners. 

• Drive complex strategic, security initiatives to delivery
• Demonstrate leadership by managing and growing engineering expertise, and setting technical direction and priorities within the organization
• Partner with other areas of the organization to drive remediation of findings and ensure regulatory/audit compliance
• Advocate security and secure practices across Dropbox maintaining a balance of security and usability
• Lead Defensive Security teams (Vulnerability Management, Infrastructure Hardening, Threat Detection, and Incident Response) providing operational and strategic planning and prioritizing the allocation of resources.
• Deliver security guidance concisely and clearly for detection and response projects and activities
• Advise senior management via supporting documentation on detection and response related items
• Guide conversations to remove blockers and encourage collaboration across teams
• Provide a point of escalation for teams facing complex technical challenges
• Expose technology and organizational needs throughout the department
  

• 8+ years of experience working in a security-focused role
• 5+ years of experience in a senior management role
• Experience leading and managing security engineers
• In-depth knowledge of attack surface reduction, boundary and endpoint threat defense, data security, and technical controls
• Experience performing or leading security operations center functions
• In-depth knowledge of the cyber security threat landscape and experience in bringing it to bear in a tailored response to a major incident.
• Data driven, customer focused, self-motivated, and organized
• Ability to communicate technical details clearly across organizational boundaries
• Familiarity with relevant security and compliance frameworks such as ISO 27001, NIST, GDPR, and SOC 2.
• Bachelors or Master’s Degree in a Cybersecurity or related discipline, or equivalent experience
• Understanding of the tools, techniques and tactics of Targeted Threat Actors and insight into present and future trends.
• Applicable Professional qualification e.g CISSP, GSOM, GCIH, GCIA, GPEN, GCFE, GREM, EnCE