Director, Product Security

Job Description:

At Remitly, we believe everyone deserves the freedom to access, move, and manage their money wherever life takes them. Since 2011, we've tirelessly delivered on our promise to customers sending money globally, providing secure, simple, and reliable ways to manage their money, ensuring true peace of mind. Whether it's supporting loved ones back home, growing a business across continents, or pursuing new opportunities abroad, we're not just here to move money— we're here to move our global customers forward. We're looking for builders, reimaginers, and global thinkers who want to work at the intersection of technology, trust, and transformation. If that's you and you're ready to do the most meaningful work of your career—we invite you to join over 2,800 passionate Remitlians worldwide who are united by our vision to transform lives with trusted financial services that transcend borders.

About the Role:

Remitly is seeking a Director of Product Security to lead and mature our software and cloud infrastructure security programs. This role owns the strategy, processes, tooling, and execution for these essential components of our Product's security. The goal is to maintain and improve security across all internally-developed software and our AWS-based cloud hosting infrastructure. You will report directly to the Chief Information Security Officer (CISO) and will partner closely with engineering, product, and platform teams to ensure secure design, resilient cloud architectures, continuous monitoring, and risk identification and reduction across the software development and infrastructure deployment lifecycles.

You Will:

• Define and execute the security strategy for product/application security and AWS infrastructure security.
• Lead teams responsible for secure Software Development Lifecycle (SDLC), threat modeling, code security, cloud configuration security, and vulnerability management.
• Build and maintain scalable security controls, guardrails, and automation for cloud-native engineering workflows.
• Partner and collaborate with engineering leaders and other stakeholders to integrate security into design reviews, release processes, and operational practices.
• Oversee security assessments, penetration testing, bug bounty, and cloud posture evaluations; drive measurable remediation outcomes.
• Develop security incident preparedness related to applications and cloud infrastructure; guide response and containment efforts.
• Implement and maintain appropriate policies, standards, and training.
• Research and benchmark approaches and technologies that could improve our programs.
• Implement controls, metrics and Key Performance Indicators (KPIs) for executives and stakeholders to demonstrate program impact and communicate risk.
• Ensure compliance with relevant regulatory requirements related to application or infrastructure security.
• Drive a culture of security accountability and responsibility throughout the organization.
• Mentor and grow a high-performing product and cloud security team.

You Have:

• 10+ years of combined experience in application/product security and cloud infrastructure security, including leadership of technical teams.
• Deep expertise in secure software development, modern CI/CD practices, threat modeling, and secure architecture patterns.
• Strong hands-on knowledge of AWS security services (e.g. GuardDuty, WAF, Inspector), identity and access management, container and serverless security, and cloud infrastructure hardening.
• Demonstrated success implementing scalable security automation (e.g. Infrastructure as Code) and guardrails in engineering organizations.
• Proven ability to work with engineering and product teams, and to translate security requirements into practical solutions.
• Strong understanding of vulnerability management, penetration testing methodologies, and cloud posture management.
• Experience presenting to and communicating with senior leadership.
• Customer obsession to implement security solutions to keep them safe while also delighting them with the experience and utility of our services.

Our Benefits:

• Equity in the company – RSUs
• Employee Stock Purchase Plan (ESPP)
• 26 days paid holiday + additional company days off
• Royalties (KUP)
• Hybrid working model (we have the office in a Kraków City Centre)
• Commute allowance
• Health/Dental Coverage – LUX MED VIP for employee and family
• Life Insurance
• Travel Insurance
• Sodexo Lunch Card/Multisport Card
• Education Budget
• Mental Health program for employee
• Family planning program
• Employee Pension Plan (PPK)

Our Connected Work Culture: Driving Innovation, Together

At Remitly, we believe that true innovation sparks when we come together. Our Connected Work Culture fosters dynamic in-person collaboration, where ideas ignite and challenging problems find solutions faster. For corporate team members, we have an in-office expectation of at least 50% of the time monthly, typically achieved by coming in three days a week. This creates a consistent, meaningful overlap that supports team norms and business needs. Managers also have the flexibility to set higher expectations based on their team's specific needs. These intentional in-office moments are vital for deepening relationships, fueling creativity, and ensuring your impact is felt where it matters most.

Remitly is an E-Verify Employer

At Remitly, we are dedicated to ensuring that our workplace offers equal employment opportunities to all employees and candidates, in full compliance with applicable laws and regulations.

Remitly is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.