Director - Proactive Security

February 18

Apply Now

Receive Emails with Similar Jobs

Fullsteam

WebsiteLinkedInAll Job Openings

Fullsteam is a leading provider of modern and scalable payments technology integrated with vertical software to offer industry-specific features and end-to-end business management systems. It delivers mission-critical infrastructure and technology, empowering a wide range of niche industries such as automotive, healthcare, recreation, and self-storage. Fullsteam's cloud-first payments technology is designed for secure, seamless integration with other vertical software, transforming how various industries conduct business. The company also offers membership and event management software for nonprofits, as well as ERP solutions for B2B markets.

Payments • Software • M&A • Technology

1001 - 5000 employees

💳 Fintech

☁️ SaaS

🤝 B2B

📋 Description

• Build proactive security capabilities and gain adoption across Fullsteam Business Units. • Capabilities include: attack surface identification and monitoring, external and internal vulnerability scanning, infrastructure and application penetration tests, software security architecture, and red team engagements. • Build and lead a globally distributed team of technical security professionals and specialized vendor engagements. • Define the software security strategy for Fullsteam Business Units. • Build and execute a repeatable and measured Software Security Program to achieve risk management outcomes. • Implement scalable enterprise software security services, including: secure architecture and software development training, secure architecture standards, secure code review standards, static code analysis processes, software composition analysis and 3rd party library management, dynamic analysis, web application firewall review and management, application and network penetration testing. • Lead and mentor offensive security engagements with Fullsteam Business Units, such as infrastructure and application penetration tests and red team exercises. • Manage external security testing vendors, including SAST, DAST, and penetration testing. • Participate in M&A due diligence assessments and integrations. • Coordinate assessment, testing, and risk management needs with stakeholders in Fullsteam Corporate and within Fullsteam Business Units. • Contribute to risk management and governance functions (e.g. manage risk register, gather key metrics) • Participate in other activities as needed: incident response consult, red/blue collaboration.

🎯 Requirements

• Experience building and leading proactive or offensive security teams. • Track record of designing, implementing and operating secure software development controls across multiple development teams. • Experience performing penetration tests of web applications, APIs, and/or networks. • Experience testing and securing public cloud architectures. • OSCP or OSWE-equivalent certification preferred. • Bachelor’s degree in Information Security, Compliance, or a related field. • 5+ years of experience in information security, risk management, and/or compliance roles.