Director Of Security Engineering

<h2><strong>About Parloa</strong></h2> <p>Parloa’s mission is to make every customer conversation feel effortless for both customers and the companies serving them. As agentic AI accelerates, Parloans are shaping the foundation of a new era in customer experience, one where customer support is no longer transactions, but meaningful exchanges. It is not just a vision; Parloa has powered over ONE BILLION interactions between global enterprise brands and their customers, with companies like&nbsp;<a href=&quot;http://booking.com/&quot;>Booking.com</a>, HealthEquity, Allianz, SAP, BarmeniaGothaer, and TUI already deploying Parloa at scale.</p> <h2><strong>About the role:</strong></h2> <p>Parloa is building the AI platform that enterprises trust with their most important conversations. That trust starts with security — and we need someone to own it entirely.</p> <p>As Director of Security, you won&#39;t just manage a team. You&#39;ll shape how a fast-scaling AI company thinks about security from the ground up: building the strategy, the culture, and the systems that protect our platform, our customers, and the data they entrust to us. You&#39;ll lead our SecOps team within Tech Platform, partner across IS&amp;T and Internal IT, and be the person our customers look to when they need confidence that Parloa takes security as seriously as they do.</p> <p>This is a builder role. If you want to define what security looks like at an AI-native company — not inherit someone else&#39;s playbook — this is it.</p> <h2><strong>Areas of ownership:</strong></h2> <ul> <li>Define and execute the product and platform security strategy — building the programs, tooling, and practices that scale with a fast-growing AI platform.</li> <li>Lead and grow the security team — hiring exceptional talent, developing senior leaders, and fostering a culture where security is every engineer&#39;s responsibility.</li> <li>Own application security across the SDLC — embedding secure coding practices, SAST/DAST/SCA tooling, threat modeling, and architectural security reviews into engineering workflows, enabling velocity without compromising safety.</li> <li>Design and implement security architectures for cloud-native applications, Kubernetes workloads, and CI/CD pipelines.</li> <li>Build and run the detection and response program — developing threat detection capabilities, tuning alerting and telemetry, and leading incident investigations, containment, and postmortems with technical rigor.</li> <li>Drive cloud security posture across our AWS/GCP infrastructure, covering identity and access, network segmentation, secrets management, and infrastructure-as-code security.</li> <li>Be Parloa&#39;s product security voice in customer engagements — fielding security questionnaires, supporting enterprise due diligence, and translating technical posture into customer confidence.</li> <li>Advance AI-specific security practices — securing LLM pipelines, model interactions, prompt injection surfaces, and data handling across the platform.</li> <li>Collaborate with IS&amp;T on shared boundaries — coordinating on incident escalation, identity systems, and compliance requirements where product and corporate security intersect, without duplicating ownership.</li> <li>Establish security metrics that matter — proving that product security posture is measurably improving, not just maintained.</li> </ul> <h2><strong>Who you are:</strong></h2> <ul> <li>12+ years in security, with at least 5 years leading security teams, ideally in product or application security at a SaaS or platform company.</li> <li>Deep hands-on experience securing cloud-native, containerized environments (AWS/GCP, Kubernetes) — you can still roll up your sleeves when it matters.</li> <li>Strong application security background — you understand secure architecture, common vulnerability classes, and how to shift security left without slowing engineering down.</li> <li>Proven detection &amp; response expertise — you&#39;ve built or significantly improved SOC/detection capabilities and led incident response in production environments.</li> <li>Effective communicator across audiences — you can translate product security risk into business terms for executives and customers, and dive into technical detail with engineers.</li> <li>Familiarity with compliance frameworks (SOC 2, ISO 27001) as they relate to product security controls — you&#39;ve contributed to audits and customer security reviews, even if GRC ownership sits elsewhere.</li> <li>Genuine curiosity about AI security — experience securing LLM-based systems is a strong plus, but a sharp instinct for emerging risk is what counts.</li> </ul> <h2><strong>Our engineering values:</strong></h2> <p>At Parloa, we hire, promote, and evaluate based on cultural and technical excellence. You’ll thrive here if you:</p> <ul> <li><strong>Earn Trust</strong>&nbsp;– act with transparency and reliability.</li> <li><strong>Obsess Over Customers</strong>&nbsp;– always start with the customer problem.</li> <li><strong>Think Big</strong>&nbsp;– set bold goals and pursue them fearlessly.</li> <li><strong>Have Integrity</strong>&nbsp;– do the right thing, especially when it’s hard.</li> <li><strong>Disagree &amp; Commit</strong>&nbsp;– debate with candor, align fast, and deliver.</li> <li><strong>Own It</strong>&nbsp;– take full responsibility for outcomes, not just tasks.</li> <li><strong>Dive Deep</strong>&nbsp;– master the details without losing sight of the big picture.</li> <li><strong>Bias for Action</strong>&nbsp;– move fast, decide quickly, iterate fearlessly.</li> <li><strong>Deliver Value</strong>&nbsp;– measure success by customer and business impact.</li> <li><strong>Insist on the Highest Standards</strong>&nbsp;– raise the bar continuously.</li> <li><strong>Go the Extra Mile</strong>&nbsp;– make the impossible possible.</li> <li><strong>Hire &amp; Elevate the Best</strong>&nbsp;– raise the bar with every hire</li> </ul> <p>&nbsp;</p> <h2><s…