Director, Product Security

Leads product security at Crunchyroll as a hands-on, principal-level director reporting to the VP of Information Security. The role shapes how engineering builds and runs software securely at scale, working mainly through influence with engineering leaders and senior engineers rather than by running reviews, and is based in Los Angeles.

Engineering teams keep ownership of their services; the director supplies the strategy, tooling, visibility and escalation paths that let them meet security obligations consistently. That covers paved paths, playbooks and secure-by-default platform capabilities; an operating rhythm for vulnerability intake, triage, ownership, SLAs, remediation and verification that stops repeat issues; enterprise security tooling wired into CI/CD and production so compliance evidence is produced automatically; and threat modelling and reference architectures built into design work. When a requirement is impractical or too costly, the director raises it early and offers alternatives such as compensating controls or resequencing. The role also improves engineering's incident readiness, makes sure post-incident actions stick, acts as the main engineering counterpart to Global Security, and now and then builds reference implementations or integrations.

Crunchyroll wants 12 or more years across information, application or cloud security or software engineering, with a record of leading large security initiatives through technical influence and shipping real systems. Strong AppSec fundamentals, cloud and platform security, CI/CD security automation and depth in vulnerability management are expected. Streaming, DRM, mobile and device security, and anti-tamper experience are pluses.