Role overview

WHOOP is seeking a Director of Product Security to lead the company’s efforts in protecting member data and building secure software systems. In this leadership position, you will shape the security strategy across WHOOP’s engineering teams, oversee product-facing identity and authentication capabilities, and drive the adoption of secure development practices throughout the organization.

Key responsibilities

Build, lead, and expand multiple engineering teams focused on product security strategy, including member authentication, code security, cloud security across AWS, privacy by design, and threat modeling.
Oversee application vulnerability management programs spanning bug bounty initiatives, code vulnerabilities, container vulnerabilities, and infrastructure security.
Develop and mature DevSecOps tooling and developer security controls, including SAST, SCA, container scanning, secrets detection, CI/CD security checks, and secure-by-default workflows.
Define and communicate long-term product security strategy, product architecture standards, and design principles for systems that protect members.
Collaborate with engineering, the office of the CISO, and compliance leadership to embed privacy and security considerations throughout the software development lifecycle.
Establish best practices, standards, and processes for secure software development, testing, and deployment across teams.
Mentor engineering managers and individual contributors, supporting career development and fostering a culture of innovation, collaboration, and continuous learning.

Requirements

Proven experience scaling a security team while defining clear and efficient team responsibilities and domains.
Demonstrated success as a technical leader managing multiple teams or leading a growing security engineering organization.
Track record of growing high-level individual contributors at the staff level or above.
Deep expertise in product security principles including vulnerability management, data privacy, threat modeling, secure software development lifecycle practices, and secure-by-default engineering patterns.
Experience building or integrating developer security tooling to strengthen secure-by-default practices.
Strong technical foundation in software development, testing, and deployment processes.
Excellent communication, interpersonal, and leadership abilities with the capacity to influence effectively across technical and organizational levels.

What makes this role worth considering

This position offers the opportunity to lead a critical function within an organization focused on unlocking human performance and longevity. You will work in Boston, MA with cross-functional partners across Product, Software, Legal, and Compliance, shaping security culture and strategy at a company where protecting member data is central to the mission. The role balances strategic oversight with hands-on technical leadership, allowing you to drive both organizational growth and meaningful security innovation.