Product Security Lead

Acronis

. Lead and oversee the product assurance program across SaaS and on-premises product lines .

Posted 11/5/2026full-timeUnited StatesSenior💰 $200,000 - $300,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in product security, including the development and management of security strategies, vulnerability management, and compliance with security regulations. Proficient in implementing security tools and practices within CI/CD environments to ensure robust software supply chain security.

Highest-signal resume keywords

Product Security ManagementVulnerability Management ProgramsSAST, DAST, SCA ToolingPSIRT LeadershipGDPR, HIPAA Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Product Security StrategySecure Development LifecycleRisk Acceptance ProcessesSecurity Toolchain Gap AnalysisVulnerability Triage and RemediationThreat ModelingPenetration TestingBug Bounty ManagementCI/CD Security ControlsApplication Security Program Development

Soft Skills

Strong Communication SkillsOrganizational SkillsProblem-Solving SkillsCustomer FocusCollaborative Teamwork

Tools & Technologies

SAST ToolsDAST ToolsSCA ToolsSecrets Scanning ToolsSBOM Management Tools

Certifications & Qualifications

CSSLPCISSPCISMOSCPOSWE

Industry Keywords

SaaS SecurityOn-Premises SecurityOWASP SAMMBSIMMNIST SSDFISO/IEC 27001AI/ML SecurityRegulated Environments

Tech Stack

Tools & technologies

CloudMicroservicesSDLC

About the role

Key responsibilities & impact

Lead and oversee the product assurance program across SaaS and on-premises product lines
Define and maintain product security strategy, policies, standards, and secure development lifecycle requirements
Establish risk acceptance, exception, and escalation processes
Report product security posture, risk trends, and program KPIs to senior leadership
Conduct product security toolchain gap analysis and build business cases for tooling investments
Evaluate and select security tools and manage vendor relationships
Configure and enforce SAST, DAST, SCA, secrets scanning, and SBOM controls in CI/CD pipelines
Define quality gates, severity thresholds, and break-the-build criteria
Oversee rule tuning and false-positive management
Drive software supply chain security, including dependency governance, SBOM management, artifact signing, and provenance
Define and oversee independent verification and validation code review processes
Oversee security design reviews and threat modeling
Direct penetration testing, red team engagements, and external security assessments
Define and oversee vulnerability intake, triage, risk scoring, SLA, and remediation processes
Verify remediation effectiveness, completeness, and absence of regressions
Manage bug bounty and coordinated vulnerability disclosure programs
Lead the PSIRT function, including security advisories, CVE publication, and customer communication
Ensure compliance with product security regulations, standards, and frameworks
Support customer security questionnaires, audits, and certification efforts
Advise Product Management and R&D on security requirements and product roadmaps
Build a security champions program and deliver secure coding training
Embed security guidance, reusable patterns, and tooling into developer workflows
Collaborate with R&D, Product, IT/Corporate Security, Legal, and other Acronis Group teams
Coordinate with international security professionals across multiple time zones
Monitor emerging threats, attack techniques, supply chain risks, AI/ML security, and relevant technologies

Requirements

What you’ll need

10-15 years of experience in information security, with at least 6-8 years in product security, application security, or secure SDLC
Hands-on experience selecting, deploying, and tuning SAST, DAST, SCA, secrets scanning, and SBOM tooling in CI/CD environments, including setting enforcement policies at scale
Experience building or maturing an application security program using OWASP SAMM, BSIMM, or NIST SSDF
Proven experience with vulnerability management programs, risk-based prioritization, SLA governance, and remediation verification
Proven experience leading PSIRT or incident response efforts for critical product vulnerabilities, including coordinated disclosure
Proven experience managing a bug bounty program
Working knowledge of GDPR, HIPAA, and ISO/IEC 27001
Strong understanding of SaaS and on-premises security product companies
Ability to analyze complex security data and trends and communicate with senior leadership
Strong verbal and written communication skills
Ability to develop long-term product security strategies aligned with business goals
Familiarity with cloud-native architectures, containers, microservices, and infrastructure as code
High integrity and ethical standards
Strong customer focus
Disciplined, detail-oriented, and able to meet deadlines
Outstanding organizational, problem-solving, and multitasking skills
Collaborative, self-motivated, and proactive
Nice to have: CSSLP, CISSP, CISM, OSCP/OSWE; AI/ML security experience; regulated or certified product environments experience
Full criminal, education, and identification background check required for all new hires

Benefits

Comp & perks

Medical coverage
Dental coverage
Vision coverage
Flexible spending accounts (FSA)
Disability insurance
Life insurance
401(k) retirement plan with company match
Generous vacation policy