Director, Product Security

Posted: 2026-03-03

About Crunchyroll

Founded by fans, Crunchyroll delivers the art and culture of anime to a passionate community. We super-serve over 100 million anime and manga fans across 200+ countries and territories, and help them connect with the stories and characters they crave. Whether that experience is online or in-person, streaming video, theatrical, games, merchandise, events and more, it’s powered by the anime content we all love.

Join our team, and help us shape the future of anime!

Crunchyroll is growing and evolving, creating both new opportunities and new challenges as it protects millions of anime fans worldwide while still shipping quickly and with high quality. We are looking for a security leader who wants to shape how engineering builds and operates securely at scale. In this Principal-level, hands-on Director role reporting to the VP of Information Security, you will connect strategy to execution by turning security goals into secure-by-default, compliant systems and practices that teams actually use. You will partner closely with engineering leaders and senior ICs to reduce friction, align on priorities, and drive consistent follow-through, protecting our fans and our platform without sacrificing delivery velocity. Success will be through influence and enablement, and you will also periodically build practical solutions, such as reference implementations and tooling integrations, that make it easier for teams to adopt the right security patterns.

Core Areas of Responsibility

In this role, you will be a force multiplier for engineering, setting the direction, building key parts, and ensuring follow-through so security becomes a durable part of how Crunchyroll ships. You will own the engineering-facing mechanisms that make security real in day-to-day delivery:

- Security execution at scale: Drive adoption of security controls across engineering by driving adoption of clear engineering playbooks, paved paths, and secure-by-default platform capabilities that can be consistently adopted across services, regardless of engineering domain. Engineering teams remain accountable for design, implementation, operation, and remediation of their services. This role provides security strategy, guidance, tooling, visibility, coordination, and escalation mechanisms that enable teams to meet those obligations consistently at scale

- Vulnerability closure and systemic risk reduction: Facilitate the operating rhythm across engineering for vulnerability intake, triage, tracking of vulnerability ownership, SLAs, remediation planning, verification, and escalation. Establish systems and processes that ensure timely fixes and eliminate repeat issues through improvements.