Director of Security

This role will establish Mico’s Security Engineering function across its products, setting security strategy and roadmap, building the team and defining its operating model. It combines organizational leadership with hands-on technical work, including threat-model reviews, architecture assessment and security capability development. The scope spans product and application security, AI/LLM security, governance and data protection, customer trust, and incident response. Responsibilities include embedding SAST, SCA and secret detection into CI/CD; establishing secure-design reviews, vulnerability management and penetration testing; and defining guardrails and adversarial testing for AI agents. The role also oversees ISMS/ISO 27001 and PrivacyMark, SOC 2 readiness, data-protection processes, and incident response. Applicants need 10+ years in security, including 3–5+ years leading security programs in a software-product environment; experience leading both Product Security and GRC; hands-on technical judgment; AWS/cloud and CI/CD security expertise; Secure SDLC experience in multi-tenant SaaS; understanding of AI/LLM threats and practical use of AI coding agents; and experience engaging enterprise or regulated-industry customers and auditors.