The Atlassian Security Team's purpose is to build trust. We seek to lead our peers in cloud and product security, meet all customer requirements and exceed requirements for industry security standards and certifications. Do you believe an organization should be open and transparent about its programs, processes, and metrics? We do. This is why we share our journey and encourage other cloud providers to do the same. We are looking for a Head of Product Security to partner with the broader Trust Organization and all of Atlassian, to shape our security posture, work across product teams, infrastructure organizations and security functions globally in a highly collaborative and engineering-driven environment to improve the security of both our Data Center and Cloud products, our infrastructure and our entire company. We are seeking an experienced and visionary security engineering leader who wants to join a team of highly talented security leaders and professionals who are revolutionizing the delivery of Atlassian platform to the world's most critical organizations in a secure way. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. This position requires strong cross-organizational leadership, communication skills, deep technical security knowledge and being very hands-on with product designs, threat modeling, security reviews, vulneability management and end-to-end security controls from a product and system infrasturcture perspective. Working at Atlassian Atlassians can choose where they work - whether in an office, from home, or a combination of the two. That way, Atlassians have more control over supporting their family, personal goals, and other priorities. We can hire people in any country where we have a legal entity. You will be expected to lead the organization that is responsible to: - Collaborate with cross functional teams to define various security controls and translate them for engineering implementation for the Atlassian prodiuct teams. - Develop and execute a comprehensive product security strategy that aligns with our core strategic objectives, and exceeds the high expectations set by our customers - Partner with product development teams to embed security best practices and considerations across the entire development lifecycle, ensuring that new features meet the highest trust standards - Collaborate with senior technical leadership across Atlassian infrastructure and IT teams to provide technical leadership to maintain compliance and adhere to different regulatory requirements. - Promote automation and drive our corporate teams to use the latest security tools, techniques and methodologies to build secure products by default. At Atlassian, we strive to design equitable, explainable, and competitive compensation programs. We follow consistent hiring practices and account for each candidate's skills, knowledge, and experience when setting base pay within the range. Please visit go.atlassian.com/payzones for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter. This role may also be eligible for benefits, bonuses, commissions, and equity. In The United States, we have three geographic pay zones. For this role, our current base pay ranges for new hires in each zone are: Zone A: $294,300 - $384,225 Zone B: $265,500 - $346,625 Zone C: $244,269 - $318,907 Your background: - At least 10+ years of multifaceted security leadership and management experience in a technology-centric company, including experience leading security teams of 0+ engineers and analysts in a globally distributed organization that services dozens of partners. - Expertise in threat modeling and the associated frameworks (e.g. STRIDE) coupled with the ability to lead and mentor across the organization on the key principles of threat modeling as well as risk assessment. - Understanding of compliance frameworks and their application to standards (e.g. SOC 2, HIPAA). Demonstrated ability to develop a strategic approach to streamline product security processes and capabilities. - Experience designing and deploying security controls across all security domains such as access management, data protection, vulnerability management, incident response and management, application security, network security, preventive, detective and offensive security solutions. - Experience securing cloud based infrastructures; AWS, G-suite, Salesforce, etc - Experience leading highly complex, org wide security change programs - Outstanding interpersonal and communication skills including EQ, mentoring, coaching, collaborating, and team building; ability to influence both internally and externally, and to drive multi-functional alignment and action - Experience in planning and driving direction autonomously - both as a hands-on security engineer, and as a leader - Maintain an area of core strength in one or more security infrastructure disciplines where you can lead through your expertise - Understanding regulatory requirements and controls such as GDPR, SOX , SOC 2, FedRAMP etc. - Track-record in working effectively with scaled systems and different methods for maintaining a security posture - Comfort in the level and speed of learning and ambiguity needed to navigate fast-evolving fields like AI - Excellent oral and written communications skills and experience interacting with both business and Development/Engineering individuals at all levels including the executive level Benefits & Perks Atlassian offers a wide range of perks and benefits designed to support you, your family and to help you engage with your local community. Our offerings include health and wellbeing resources, paid volunteer days, and so much more. To learn more, visit go.atlassian.com/perksandbenefits . About Atlassian At Atlassian, we're motivated by a common goal: to unleash the potential of every team. Our software products help teams all over the planet and our solutions are designed for all types of work. Team collaboration through our tools makes what may be impossible alone, possible together. We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines. To provide you the best experience, we can support with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team during your conversation with them. To learn more about our culture and hiring process, visit go.atlassian.com/crh . In line with local law, identity verification (which may include use of biometric data) is a condition of employment with Atlassian for employment fraud purposes.

Role Description Own and enhance our SIEM platform while helping drive critical security initiatives across cloud, data protection, and threat detection. This role is ideal for a hands-on security engineer who enjoys building and improving security systems, not just monitoring them. You’ll play a key role in advancing our security posture by owning our SIEM platform and supporting enterprise security initiatives such as data protection and cloud security. - Own and optimize the SIEM platform (Sumo Logic), including: - Building detection rules, alerts, and queries - Creating dashboards and improving system visibility - Tuning alerts to reduce false positives and improve accuracy - Partner with the SOC team by: - Supporting escalated investigations and incident response - Providing logs, data analysis, and technical insights - Identify gaps in current security monitoring and implement improvements to strengthen detection capabilities - Support enterprise security initiatives, including: - Data protection and DLP programs (Microsoft Purview / O365) - Classification and protection of sensitive data (PII) - Work across security tools and environments, including SIEM, endpoint security (CrowdStrike), and cloud (AWS/Azure) - Collaborate with infrastructure, application, and security teams to improve overall security posture - Stay current on emerging threats, tools, and industry best practices Qualifications - 4+ years of experience in Cybersecurity, Security Engineering, or IT Security - Strong hands-on experience with SIEM tools (Sumo Logic, Splunk, QRadar, or similar) - Experience building queries, alerts, and dashboards (not just monitoring) - Background in systems administration or IT infrastructure - Experience supporting or partnering with incident response teams - Familiarity with cloud environments (AWS or Azure) - Strong analytical, troubleshooting, and problem-solving skills - Strong communication skills and ability to collaborate across teams Requirements - Experience with data protection or DLP tools (Microsoft Purview preferred) - Experience with endpoint security tools (CrowdStrike or similar EDR) - Basic scripting or automation (Python or PowerShell) - Familiarity with security frameworks (NIST, CIS, ISO) - Relevant certifications (Security+, GIAC, CISSP, etc.) Benefits - Competitive base salary plus monthly bonus potential - Comprehensive Medical, Dental & Vision benefits starting on the first of the month following hire date - Pet Insurance starting on the first of the month following hire date - 8 Paid Holidays per year - Paid Time Off - 401(k) - Wellness Program - Parental Leave

• Own and optimize the Elastic Security platform (Elasticsearch, Kibana, Fleet, Logstash, Elastic Agents) • Design and maintain ingestion pipelines for cloud, endpoint, network, and application telemetry • Improve telemetry quality, data retention, performance, and investigation workflows • Integrate SIEM workflows with SOAR and automation tooling • Build and maintain a Detection-as-Code pipeline using Git-based workflows and CI/CD automation • Develop, test, tune, and maintain high-fidelity detections using Elastic Security, EQL, and KQL • Reduce alert noise through tuning, enrichment, suppression, and exception handling • Map detections to MITRE ATT&CK and drive detection coverage strategy • Assist with complex alert escalations and perform initial incident scoping • Translate incident learnings into improved detections and telemetry coverage • Partner with other teams to improve logging and visibility

• Run our GRC program — then automate it. • Own how customer data moves through our stack. • Be the security gate for new tools and vendors. • Make Close best-in-class at communicating trustworthiness. • Coordinate product security audits. • Investigate and clean up security incidents. • Own our identity and device security. • Run our employee security program.