SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Parloa is an AI-native customer experience platform that has powered over one billion interactions for enterprise brands including Booking.com, HealthEquity, Allianz, SAP, and TUI. The company is building the foundational AI platform that enterprises trust with their most critical customer conversations.
As Director of Security Engineering, you will own security strategy and execution across the entire product and platform. This is a builder role where you'll define what security looks like at an AI-native company from the ground up, not inherit an existing playbook.
Key responsibilities include:
- Define and execute product and platform security strategy, building programs, tooling, and practices that scale with rapid growth
- Lead and grow the security team, hiring talent and developing senior leaders while fostering a culture where security is every engineer's responsibility
- Own application security across the software development lifecycle, embedding secure coding practices, SAST/DAST/SCA tooling, threat modeling, and architectural reviews
- Design security architectures for cloud-native applications, Kubernetes workloads, and CI/CD pipelines
- Build and run detection and response programs with threat detection capabilities, alerting tuning, and incident investigation leadership
- Drive cloud security posture across AWS/GCP infrastructure covering identity, access, network segmentation, secrets management, and infrastructure-as-code
- Serve as Parloa's product security voice in customer engagements, handling security questionnaires and enterprise due diligence
- Advance AI-specific security practices including LLM pipeline security, model interactions, prompt injection surfaces, and data handling
- Collaborate with IS&T on incident escalation, identity systems, and compliance requirements
- Establish security metrics that demonstrate measurable improvement in product security posture
You bring 12+ years in security with at least 5 years leading security teams, ideally in product or application security at SaaS or platform companies. You have deep hands-on experience securing cloud-native, containerized environments (AWS/GCP, Kubernetes) and can still roll up your sleeves when needed. Strong application security background with understanding of secure architecture, vulnerability classes, and shifting security left. Proven detection and response expertise with SOC/detection capability building and production incident response leadership. You communicate effectively across audiences, translating product security risk into business terms for executives and customers while diving into technical detail with engineers. Familiarity with SOC 2 and ISO 27001 compliance frameworks as they relate to product security controls. Genuine curiosity about AI security with experience securing LLM-based systems preferred.
