Director of Information Security

panthalassa

Portland, Oregon

Full Time

Posted April 30, 2026

$200k - $275k

Not Specified

~20 people viewed this recently

Apply Now

Application opens on company website

Job Description

The role involves designing and implementing the company's information security architecture across corporate, cloud, and engineering systems to enable rapid scaling while maintaining security, partnering with various teams to identify risks, and leading security initiatives in a fast-paced, innovative environment.

Key Responsibilities

Design and implement security architecture for corporate, cloud, and enterprise systems.
Build security guardrails into engineering and operational workflows, including source control, CI/CD, infrastructure as code, secrets management, logging, and access reviews.
Partner with IT and infrastructure teams to harden networks, cloud environments, endpoints, and collaboration systems.
Define and implement identity and access management patterns such as SSO, MFA, RBAC, and privileged access workflows.
Lead vulnerability management, including scanning, prioritization, remediation, and verification.
Establish detection and response capabilities, including telemetry, alerting, incident playbooks, and forensic readiness.
Perform security architecture reviews for new tools, vendors, and infrastructure changes.
Develop security policies and standards aligned with company operations.
Collaborate with legal, finance, and business teams on audit readiness, third-party risk, and security requirements.
Drive remediation of high-priority risks through implementation, automation, and partnership with system owners.
Create documentation, runbooks, and training to enhance the company's security posture.
Serve as a senior technical advisor during security incidents and operational events.

Requirements

8 years of experience in security engineering, infrastructure security, platform security, or a closely related domain.
Strong hands-on experience securing cloud and enterprise environments, including identity, networking, endpoints, SaaS, and logging monitoring systems.
Experience building and operating security controls in modern engineering environments, including CI CD pipelines, source control platforms, infrastructure as code, and developer tooling.
Deep knowledge of identity and access management, including SSO, MFA, RBAC, provisioning and deprovisioning, and privileged access design.
Proven experience leading vulnerability management and remediation programs in a fast-moving engineering environment.
Experience designing security architectures and making high-quality tradeoff decisions in complex, ambiguous settings.
Ability to move fluidly between strategic planning and hands-on execution.
Clear written and verbal communication skills, with the ability to work effectively across technical and non-technical teams.
This role requires regular on-site presence in Portland, Oregon, with the ability to work across office, lab, and industrial environments.
Occasional travel to vendors, partner sites, test sites, or future facilities may be required.
Intermittently able to work longer hours when supporting critical incidents, infrastructure changes, or time-sensitive operational needs.