Director of Security

Veeam, the #1 global market leader in data resilience, believes businesses should control all their data whenever and wherever they need it. Veeam provides data resilience through data backup, data recovery, data portability, data security, and data intelligence. Based in Seattle, Veeam protects over 550,000 customers worldwide who trust Veeam to keep their businesses running. Join us as we move forward together, growing, learning, and making a real impact for some of the world’s biggest brands. The future of data resilience is here – go fearlessly forward with us. About the Role As the Director of Security for Veeam Data Cloud (VDC), you will own the vision and execution of our security strategy, ensuring that we anticipate risks and build resilient defences as we scale. This role requires a strong “nose for risk”; the ability to spot emerging threats in complex, fast-growing SaaS environments and translate them into pragmatic controls and business decisions. You will lead both defensive and offensive security capabilities (“blue team” and “red team”), expand our research and hunting functions, and serve as the executive voice for security across VDC’s leadership, customers, and regulators. What You’ll Do Strategic Leadership & Risk Management Define and drive a proactive security strategy that scales with our growing SaaS platform and tenant base. Anticipate and prioritize risks across applications, infrastructure, and operations, focusing investment where it matters most. Advise executive leadership on risk trade-offs and ensure security is factored into business and product decisions. Maintain a forward-looking view of the threat landscape and position VDC ahead of adversaries. Security Program Development Lead a balanced program that includes both offensive testing and research as well as defensive monitoring and response. Build internal capabilities for threat detection, hunting, and simulation that continuously validate and strengthen our posture. Establish clear metrics to measure security maturity and demonstrate progress to leadership and external stakeholders. Governance, Compliance & Engagement Partner with Corporate Security & GRC to ensure VDC meets evolving compliance and regulatory obligations without burdening engineering teams. Represent VDC’s security program in executive briefings, customer meetings, and audit/regulatory interactions. Position security as a competitive advantage in the SaaS market through transparency and thought leadership. Leadership & Culture Build, mentor, and scale a high-performing team of security engineers and researchers. Foster a culture of accountability, curiosity, and proactive risk management across engineering. Champion security-by-design principles and influence product and platform roadmaps to support secure growth. What You’ll Bring 10+ years of progressive experience in security, with at least 5 years in leadership roles. Deep experience in SaaS security at scale , including multi-tenant architecture and cloud platforms (Azure, AWS). Demonstrated ability to lead both offensive and defensive security functions in complex environments. Proven “nose for risk” — skilled at identifying emerging threats and guiding pragmatic mitigations. Executive-level experience engaging with enterprise customers, auditors, and regulators. Strong understanding of compliance and regulatory frameworks (SOC 2, ISO 27001, FedRAMP, HIPAA, NIST). Track record of building and scaling high-impact security programs and teams. Exceptional communication skills, with the ability to influence across technical and non-technical audiences. Bachelor’s degree in Computer Science, Information Security, or related field; advanced degree preferred. What You’ll Get Unlimited paid time off, plus 3 global VeeaMe Days for self-care Paid parental leave: 8 weeks for all parents, 16 weeks for birthing parents Medical, dental, and vision coverage from day one Mental health support, therapy sessions, and digital wellness tools via SupportLinc EAP 401(k) retirement plan with matching contributions up to annual limits Fertility, adoption, and surrogacy support through Maven, plus paid volunteer time AirVet: 24/7 virtual veterinary care at no cost Legal services, identity protection, and supplemental health insurance options Tax-advantaged spending accounts for healthcare, dependent care, and commuting Professional training and education, including courses and workshops, internal meetups, and unlimited access to our online learning platforms (LinkedIn Learning, Athena, O’Reilly) and mentoring through our MentorLab program Please note: If an applicant is permanently located outside of the United States, Veeam reserves the right to decline the application for this position. #LI-IU1 The salary range posted is On Target Earnings (OTE), which is inclusive of base and variable pay. When making an offer of employment, Veeam will take into consideration the candidate’s expectations, experience, education, scope of responsibility for the role, and the current market demands. United States of America Pay Range$239,600—$342,300 USD Veeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential. Please note that any personal data collected from you during the recruitment process will be processed in accordance with our Recruiting Privacy Notice . The Privacy Notice sets out the basis on which the personal data collected from you, or that you provide to us, will be processed by us in connection with our recruitment processes. By applying for this position, you consent to the processing of your personal data in accordance with our Recruiting Privacy Notice . By submitting your application, you acknowledge that the information provided in your job application and any supporting documents is complete and accurate to the best of your knowledge. Any misrepresentation, omission, or falsification of information may result in disqualification from consideration for employment or, if discovered after employment begins, termination of employment.