Head of Product Security

The Atlassian Security Team's purpose is to build trust. We seek to lead our peers in cloud and product security, meet all customer requirements and exceed requirements for industry security standards and certifications. Do you believe an organization should be open and transparent about its programs, processes, and metrics? We do. This is why we share our journey and encourage other cloud providers to do the same.

We are looking for a Head of Product Security to partner with the broader Trust Organization and all of Atlassian, to shape our security posture, work across product teams, infrastructure organizations and security functions globally in a highly collaborative and engineering-driven environment to improve the security of both our Data Center and Cloud products, our infrastructure and our entire company. We are seeking an experienced and visionary security engineering leader who wants to join a team of highly talented security leaders and professionals who are revolutionizing the delivery of Atlassian platform to the world’s most critical organizations in a secure way.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

This position requires strong cross-organizational leadership, communication skills, deep technical security knowledge and being very hands-on with product designs, threat modeling, security reviews, vulneability management and end-to-end security controls from a product and system infrasturcture perspective.

Working at Atlassian

Atlassians can choose where they work – whether in an office, from home, or a combination of the two. That way, Atlassians have more control over supporting their family, personal goals, and other priorities. We can hire people in any country where we have a legal entity.

Responsibilities

You will be expected to lead the organization that is responsible to:

• Collaborate with cross functional teams to define various security controls and translate them for engineering implementation for the Atlassian prodiuct teams.
• Develop and execute a comprehensive product security strategy that aligns with our core strategic objectives, and exceeds the high expectations set by our customers
• Partner with product development teams to embed security best practices and considerations across the entire development lifecycle, ensuring that new features meet the highest trust standards
• Collaborate with senior technical leadership across Atlassian infrastructure and IT teams to provide technical leadership to maintain compliance and adhere to different regulatory requirements.
• Promote automation and drive our corporate teams to use the latest security tools, techniques and methodologies to build secure products by default.

Your background:

• At least 10+ years of multifaceted security leadership and management experience in a technology-centric company, including experience leading security teams of 0+ engineers and analysts in a globally distributed organization that services dozens of partners.
• Expertise in threat modeling and the associated frameworks (e.g. STRIDE) coupled with the ability to lead and mentor across the organization on the key principles of threat modeling as well as risk assessment.
• Understanding of compliance frameworks and their application to standards (e.g. SOC 2, HIPAA). Demonstrated ability to develop a strategic approach to streamline product security processes and capabilities.
• Experience designing and deploying security controls across all security domains such as access management, data protection, vulnerability management, incident response and management, application security, network security, preventive, detective and offensive security solutions.
• Experience securing cloud based infrastructures; AWS, G-suite, Salesforce, etc
• Experience leading highly complex, org wide security change programs
• Outstanding interpersonal and communication skills including EQ, mentoring, coaching, collaborating, and team building; ability to influence both internally and externally, and to drive multi-functional alignment and action
• Experience in planning and driving direction autonomously - both as a hands-on security engineer, and as a leader
• Maintain an area of core strength in one or more security infrastructure disciplines where you can lead through your expertise
• Understanding regulatory requirements and controls such as GDPR, SOX , SOC 2, FedRAMP etc.
• Track-record in working effectively with scaled systems and different methods for maintaining a security posture
• Comfort in the level and speed of learning and ambiguity needed to navigate fast-evolving fields like AI
• Excellent oral and written communications skills and experience interacting with both business and Development/Engineering individuals at all levels including the executive level

Atlassian offers a wide range of perks and benefits designed to support you, your family and to help you engage with your local community. Our offerings include health and wellbeing resources, paid volunteer days, and so much more. To learn more, visit go.atlassian.com/perksandbenefits .

About Atlassian

At Atlassian, we're motivated by a common goal: to unleash the potential of every team. Our software products help teams all over the planet and our solutions are designed for all types of work. Team collaboration through our tools makes what may be impossible alone, possible together.

We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.

To provide you the best experience, we can support with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team during your conversation with them.

To learn more about our culture and hiring process, visit go.atlassian.com/crh .

In line with local law, identity verification (which may include use of biometric data) is a condition of employment with Atlassian for employment fraud purposes.