Skip to content
Runpod

Director, Security

Remote - USARemote · United States
Director+ · FullTime · Engineering
POSTED 8 OCTVERIFIED 25M AGO
Apply Ask
Role
35 days opentrue age
Posted 8 Oct
Pay
$209k–$300kno pay posted
Market p25–p75
$209k–$300k
United States · n=102 · 365d to 12 Nov
CompanyRunpod →
21open roles
Opened · 30d
+1
Closed · 30d
−3
11d of snapshots · 30d window
Market
388open · Director+ Security
Opened · 7d
+277% of open
All security
8,358open
All tracked boards · live 12 Nov · n=388
Visa
1H-1B LCAs · FY26
LCAs FY26 · n=1 · to 2026-05-13
Kubernetes

Runpod is the AI Developer Cloud. More than one million developers, from indie researchers to teams running frontier models in production, use Runpod to experiment, train, fine-tune, deploy, and scale AI on one platform. The platform has processed more than 20 billion inference requests. We closed a $100M Series A in June 2026. We're at an inflection point for AI infrastructure, and we're building the platform the next generation of developers will depend on.

We're a small, remote-first team. We take ownership seriously, move fast, and ship work that more than a million developers rely on every day. We're looking for people who care deeply, build with urgency, and want to matter at scale.

Learn more in our CEO's funding announcement: https://www.runpod.io/blog/one-million-developers.

We’re looking for a Director of Security to lead and scale Runpod’s security organization. This role owns the end-to-end security posture of our cloud platform, infrastructure, and corporate environments. You will build the operating rhythm, culture, and technical direction that help Runpod scale securely, protecting customer AI workloads and ensuring trust as demand surges.

You will partner tightly with Engineering, Product, GTM, and Infrastructure leadership. Your focus is ensuring our customers experience Runpod as a secure, compliant, and resilient environment for training and running mission-critical AI inference workloads.

Responsibilities

Own Security Strategy & Execution: Lead the security organization across multiple domains, including Cloud Security, Application Security, SecOps, and GRC (Governance, Risk, and Compliance). Ensure predictable, high-quality execution of security initiatives.

Implement Frameworks & Compliance: Partner with GTM and Legal to shape strategy and achieve/maintain critical compliance certifications (e.g., SOC 2, ISO 27001, HIPAA). Translate regulatory requirements into clear technical scopes and measurable outcomes.

Build a High-Output Org: Hire, mentor, and grow security managers and senior ICs. Create a culture of ownership, speed, and craft in a remote-first environment.

Drive Secure Product Development: Embed security into the engineering lifecycle. Run secure software development processes (SSDLC), threat modeling, architecture reviews, and automated vulnerability scanning without bottlenecking release velocity.

Threat Detection & Incident Response: Drive measurable improvements in platform resilience. Establish robust monitoring, logging, and alerting systems, and lead the incident response program to minimize MTTD (Mean Time to Detect) and MTTR (Mean Time to Respond).

Customer Trust & Vendor Risk: Ensure our security posture translates directly to business value. Act as an executive sponsor for critical customer security conversations and manage third-party vendor risk assessments.

Security Automation & Tooling: Balance speed and security by heavily investing in automation. Shift security left by integrating testing and policy enforcement seamlessly into CI/CD pipelines and deployment workflows.

Architectural Stewardship Without Becoming a Bottleneck: Provide security oversight for infrastructure systems (GPU clusters, network perimeters, IAM, backend services), ensuring robust zero-trust principles and scalability.

Partner with Infrastructure Leadership: Coordinate dependencies cleanly with Infra/SRE teams to ensure secure infrastructure provisioning, network isolation, and high-availability operations.

Requirements

Security Leadership Experience: 7+ years leading security teams including managers and/or multiple squads, with a proven record of securing high-scale cloud platforms or infrastructure products.

Program Development Strength: Demonstrated ability to take complex security goals from concept through execution, balancing risk, scope, timelines, and business agility.

Cloud Security Expertise: 8+ years building and securing SaaS, platforms, or IaaS products. Deep technical understanding of modern cloud-native architectures, Kubernetes, Linux OS security, networking, and virtualization.

Source · RunpodFirst seen 3 NovOriginal ↗