Director, Global Product Security

Job not on LinkedIn

🔥 13 hours ago

🌽 Illinois, Kansas – Remote

🌽 Illinois – Remote 🌪️ Kansas – Remote

💵 $170k - $195k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.

Apply Now

Find Similar Remote Jobs

Koch

WebsiteLinkedInAll Job Openings

10,000+ employees

🏭 Manufacturing

⚡ Energy

📦 Logistics

🔥 Funding within the last year

💰 $224M Venture Round on 2026-03

Manufacturing • Energy • Logistics

Koch is a privately held, diversified conglomerate that acquires, creates, develops and invests in a broad portfolio of companies spanning everyday essentials, industrial products, energy and software. Growing from a small Midwest business into one of the largest private companies globally, Koch’s subsidiaries include businesses in paper goods, chemicals and materials, engineered products, logistics, and energy operations. The company emphasizes Principle Based Management™, long-term stewardship, innovation, and community and environmental initiatives across its operating companies.

📋 Description

• Define and lead the company-wide product security strategy and governance structure across product lines and geographies • Establish a scalable product security framework, policies, standards, engineering requirements, maturity model, metrics, and business-unit flexibility • Partner with senior engineering and business leaders to integrate security into product lifecycles and business decisions • Establish accountability between the central Product Security organization and product-development teams • Provide consulting on threat modeling, attack-surface analysis, security architecture and design reviews, risk assessments, vulnerability analysis, and security testing • Establish and improve a Secure Product Development Lifecycle with risk-based security gates, evidence requirements, exceptions, and acceptance criteria • Establish and operate a global Product Security Incident Response Team, including vulnerability intake, triage, investigation, severity and prioritization, remediation coordination, and disclosure • Mature SBOM, software composition analysis, open-source security, and software and product supply-chain security practices • Translate industry, regulatory, contractual, and customer requirements into practical engineering standards • Develop reusable security patterns, reference architectures, tools, guidance, training, communities of practice, and security-champion programs • Monitor emerging threats, technologies, regulations, standards, and customer expectations and translate them into priorities, roadmaps, and investment plans • Represent Product Security in executive, customer, researcher, supplier, government, and strategic-partner engagements

🎯 Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, business, or a related discipline • 10 or more years of progressive experience in product security in global organizations • Experience establishing, leading and scaling product security programs across complex global technology portfolios and geographically diverse development teams • Experience establishing and operating a coordinated vulnerability disclosure and PSIRT or product vulnerability-response program • Deep experience with secure product development, security architecture, threat modeling, vulnerability management, security testing, and software supply-chain security • Experience developing enterprise product security standards, policies, engineering requirements, governance mechanisms, training and metrics • Experience working directly with engineering and product-development organizations in regulated, safety-critical, or mission-critical environments • Experience influencing senior technical and business leaders across organizational boundaries • Ability to communicate complex technical and product risk clearly to executive, engineering, customer, and external audiences • Ability to travel 10–20% domestically and internationally • Experience across multiple industries, particularly medical devices, automotive, telecommunications or networking, and defense (preferred) • Experience with embedded systems, firmware, hardware security, and industrial or connected products (preferred) • Knowledge of FDA pre- and post-market guidance, EU MDR, EU Cyber Resilience Act, NIST Secure Software Development Framework, and coordinated vulnerability disclosure (preferred)

🏖️ Benefits

• Variable pay, issued as a monetary bonus or in another form • Medical insurance • Dental insurance • Vision insurance • Flexible spending accounts • Health savings accounts • Life insurance • Accidental death and dismemberment (ADD) insurance • Disability insurance • Retirement benefits • Paid vacation/time off • Educational assistance • May include infertility assistance • May include paid parental leave • May include adoption assistance • Flexible work environment

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume