Role overview

WHOOP is seeking a Director of Security Engineering & Operations to lead enterprise security teams and report directly to the Chief Information Security Officer. This senior leadership role shapes security strategy and drives measurable outcomes across security engineering, detection, response, and operations in a fast-moving technology environment.

Key responsibilities

Define strategy, priorities, technical standards, and measurable outcomes for Security Engineering and Security Operations functions.
Build and advance a detection and response program that connects threat scenarios to telemetry, detections, investigations, response procedures, and controls across identity, data protection, and insider risk domains.
Lead security incident readiness and response activities, including incident command for significant events, cross-functional coordination, post-incident reviews, and accountability for follow-up actions.
Guide the engineering and operationalization of preventive and detective controls across identity, endpoint, cloud, SaaS, infrastructure, data, and AI-enabled systems while maintaining high standards for technical design and lifecycle management.
Develop and lead security strategy for AI-enabled products and enterprise AI adoption, including access controls, sensitive data handling, model security, third-party integrations, and monitoring.
Drive outcome-oriented decisions on security technology and managed services, including when to automate, build, buy, or partner with external providers.
Lead, coach, and develop managers, engineers, and analysts while strengthening cross-functional collaboration across product security, architecture, engineering, compliance, legal, and privacy teams.

Requirements

Ten or more years of information security experience with deep expertise in Security Operations and meaningful background in Security Engineering within complex technology environments.
Five or more years of people leadership experience, including multiple years managing managers and senior technical contributors, with demonstrated success in hiring, coaching, performance management, and organizational design.
Deep technical expertise in detection engineering, SIEM and telemetry strategy, incident response, and modern security operations, including experience leading significant security incidents.
Proven ability to drive disciplined execution across priorities, roadmaps, backlogs, and metrics while maximizing existing capabilities before adopting additional technology.
Experience managing Managed Detection and Response (MDR), Managed Security Service Providers (MSSP), or similar security partners with accountability to measurable outcomes.
Experience securing AI-enabled products, enterprise AI adoption, or AI development environments, including risks related to sensitive data, models, agents, and access controls.
Strong judgment and relationship-building skills with a track record of collaborating effectively across technical, product, risk, legal, and senior leadership teams. Experience in health technology or other sensitive-data environments is valued.

What makes this role worth considering

This position offers the opportunity to shape security strategy and operating model as WHOOP scales its technology and expands AI capabilities across member-facing products and internal systems. You will work closely with the CISO as a senior member of the security leadership team, directly influencing organizational design and workforce planning in a health technology company.