Director, Defensive Security Jobs

Dropbox is a special place where we are all seeking to fulfill our mission to design a more enlightened way of working. We’re looking for innovative talent to join us on our journey. The words shared by our founders at the start of Dropbox still ring true today.
Wouldn’t it be great if our working environment—and the tools we use—were designed with people’s actual needs in mind? Imagine if every minute at work were well spent—if we could focus and spend our time on the things that matter. This is possible, and Dropbox is connecting the dots.
The nearly 3,000 Dropboxers around the world have helped make Dropbox a living workspace - the place where people come together and their ideas come to life. Our 700+ million global users have been some of our best salespeople, and they have helped us acquire customers with incredible efficiency. As a result, we reached a billion dollar revenue run rate faster than any software-as-a-service company in history.
Dropbox is making the dream of a fulfilling and seamless work life a reality. We hope you’ll join us on the journey.

Our Engineering team is working to simplify the way people work together. They’re building a family of products that handle over a billion files a day for people around the world. With our broad mission and massive scale, there are countless opportunities to make an impact.

The Dropbox Security team is seeking an experienced leader who will report to the Head of Security. The Security Director, Defensive Security is responsible for holistic threat prevention, detection and response for threats directed against Dropbox customers and business. This is a technical management role, requiring deep security knowledge and proven leadership and management skills. The position is closely involved in helping to mentor, develop and evaluate employee performance as well as helping with development and continuous improvement of the Security team. This role will strategically influence how we secure our customers and company, implement a multi-year strategy, provide necessary guidance and technical leadership to more junior engineers, and participate in sharing information with the company and senior leaders. A successful candidate will be able to balance constant evolving tactical needs with the ability to drive critical initiatives across the company and with our partners.

• Deliver security guidance concisely and clearly for detection and response projects and activities
• Drive complex strategic, security initiatives to delivery
• Advise senior management via supporting documentation on detection and response related items
• Advocate security and secure practices across Dropbox maintaining a balance of security and usability
• Guide conversations to remove blockers and encourage collaboration across teams
• Expose technology and organizational needs throughout the department
• Lead Defensive Security teams (Vulnerability Management, Infrastructure Hardening, Threat Detection, and Incident Response) providing operational and strategic planning and prioritizing the allocation of resources.
• Partner with other areas of the organization to drive remediation of findings and ensure regulatory/audit compliance
• Provide a point of escalation for teams facing complex technical challenges
• Demonstrate leadership by managing and growing engineering expertise, and setting technical direction and priorities within the organization

• In-depth knowledge of the cyber security threat landscape and experience in bringing it to bear in a tailored response to a major incident.
• Applicable Professional qualification e.g CISSP, GSOM, GCIH, GCIA, GPEN, GCFE, GREM, EnCE
• Bachelors or Master’s Degree in a Cybersecurity or related discipline, or equivalent experience
• Experience leading and managing security engineers
• Ability to communicate technical details clearly across organizational boundaries
• Familiarity with relevant security and compliance frameworks such as ISO 27001, NIST, GDPR, and SOC 2.
• 5+ years of experience in a senior management role
• Experience performing or leading security operations center functions
• 8+ years of experience working in a security-focused role
• In-depth knowledge of attack surface reduction, boundary and endpoint threat defense, data security, and technical controls
• Data driven, customer focused, self-motivated, and organized
• Understanding of the tools, techniques and tactics of Targeted Threat Actors and insight into present and future trends.

Dropbox is an equal opportunity employer. We are a welcoming place for everyone, and we do our best to make sure all people feel supported and connected at work. A big part of that effort is our support for members and allies of internal groups like Asians at Dropbox, BlackDropboxers, Latinx, Pridebox (LGBTQ), Vets at Dropbox, Women at Dropbox, ATX Diversity (based in Austin, Texas) and the Dropbox Empowerment Network (based in Dublin, Ireland).