Director of Security Engineering

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our Security organization protects Asana’s employees, users, and customers by proactively addressing threats, enabling secure product development, and embedding security into the fabric of how we operate. We partner closely with Engineering, Product, IT, Legal, and Compliance to build and maintain trust at scale.

We are seeking a Director of Security Engineering to lead and grow our Security Engineering organization as Asana continues to grow globally. This role is pivotal in translating high-level security strategy into technical reality, ensuring our infrastructure is resilient by design and our internal security tooling is world-class.

This is a leadership role with accountability for people management, technical mentorship, and the delivery of high-impact security initiatives across a complex, high-growth SaaS environment.

This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements.

What you’ll achieve

• Build security by construction, design and default throughout all of Asana’s products and infrastructure.
• Accelerate the development lifecycle by building and owning frameworks, interfaces, services and libraries that solves security problems and frees other Asanas to focus.
• Be the voice of the customer in driving security features in our products and making those product features a differentiator for Asana.
• Lead and mentor a multi-disciplinary engineering team, fostering a culture of technical excellence, psychological safety, and high accountability.
• Own the security engineering roadmap, ensuring high-quality and high-velocity delivery and measurable risk reduction through effective prioritization and data-driven operations.
• Drive recruiting efforts to attract top-tier talent and establish clear, ambitious career paths for your team.
• Collaborate with Product and Engineering teams to embed security requirements directly into system designs and development workflows.
• Oversee complex design reviews, providing pragmatic guidance to ensure Asana’s infrastructure and features are inherently secure.

About you

• 10+ years of experience in a combination of security and software engineering, including 3+ years of experience directly managing high-performing engineering teams.
• A strong background in software engineering with the ability to participate in deep-dive design reviews and provide technical direction on architecture and code.
• Deep understanding of modern security domains, including application security (OWASP), cloud-native architecture, and identity frameworks (OAuth,...