About the company
Founded in 2018 with co-headquarters in Dublin and Boston, Tines powers some of the world's most important workflows. Our intelligent workflow platform applies AI, automation, and integration with human ingenuity to drive real business results. Tines serves a diverse range of customers, from startups to public companies, including Canva, Databricks, Elastic, Kayak, Intercom, and McKesson.
Responsibilities
- Define and execute the product security strategy, roadmap, operating model, and success metrics in alignment with company objectives and product risk
- Hire, manage, mentor, and develop product security engineers, creating a culture of technical excellence, accountability, curiosity, and sustainable execution
- Build strong relationships with engineering, product, infrastructure, legal, compliance, and executive stakeholders
- Establish scalable security practices throughout the software development lifecycle, including security requirements, architecture reviews, threat modeling, testing, and remediation
- Use AI and automation to expand product security coverage and reduce manual toil, including automated review, vulnerability triage, risk identification, and agentic security workflows
- Partner with product and engineering teams to identify and mitigate risks in AI-powered features and systems, including prompt injection, data leakage, model abuse, excessive agency, and insecure tool use
- Guide the design and implementation of secure architectures and platform controls that support a growing portfolio of cloud-native, multi-tenant products
- Develop a consistent framework for identifying, communicating, prioritizing, and accepting product security risks
- Own the product vulnerability management lifecycle, including internal findings, customer reports, penetration tests, vulnerability disclosure, and bug bounty submissions
- Build or sponsor secure-by-default tooling, paved roads, and automated controls using Tines, CI/CD integrations, and AI-driven capabilities
- Serve as a product security leader during incidents, coordinate technical investigation and remediation, participate in the on-call program, and ensure lessons learned result in durable improvements
- Develop security champions, training, documentation, and technical guidance that help engineering teams independently make secure decisions
- Establish meaningful measures of product security effectiveness and communicate risks, investments, progress, and tradeoffs clearly to technical and executive audiences
- Support customer and partner security conversations, coordinate independent security assessments, and represent Tines in relevant security communities
Requirements
- 8+ years of experience in application security, product security, or closely related security engineering roles, including experience securing cloud-native SaaS products
- 5+ years of people management or technical leadership experience, with a track record of developing engineers and building effective security teams or programs
- Demonstrated ability to define product security strategy, translate strategy into an executable roadmap, and prioritize investments based on business and technical risk
- Strong technical foundation in modern application security, secure architecture, threat modeling, OWASP Top 10, and secure SDLC practices
- Experience partnering with engineering and product leaders to deliver security outcomes without creating unnecessary friction