Senior Technical Program Manager, Product Security

Company Overview

Docusign brings agreements to life. More than 1.8 million customers and more than a billion people in over 180 countries use Docusign solutions to accelerate the process of doing business and simplify people’s lives. With intelligent agreement management, Docusign unleashes business-critical data that is trapped inside of documents. Until now, these were disconnected from business systems of record, costing businesses time, money, and opportunity. Using the Docusign AI-native IAM platform, companies can create, commit, and manage agreements with solutions created by the #1 company in e-signature and contract lifecycle management (CLM).

What you'll do

As a Senior TPM in Product Security, you will shape and execute the long-term strategy for building security into our products. You'll spearhead the shift-left movement, ensuring secure development practices are embedded early and consistently across all teams. You will lead organizational change by building scalable programs, driving adoption of secure-by-design principles, and aligning security priorities with business goals. In this role, you'll act as a trusted partner to executives, influencing roadmaps and investment decisions, while enabling engineering teams to move fast without compromising security.

This position is an individual contributor role reporting to the Sr. Manager, Security Product Management.

Responsibility

• Own and scale product security initiatives that span across engineering organizations, balancing risk reduction with innovation

• Drive adoption of secure coding, automated security tooling, and early threat modeling across the SDLC

• Partner with senior engineering and product leaders to embed security into decision-making, roadmaps, and design principles

• Translate technical risk into business impact, providing clear updates, trade-off discussions, and recommendations to executives

• Lead organizational change by fostering a developer-first security culture that scales across teams and geographies

• Ensure products meet internal security standards, industry frameworks, and regulatory requirements

• Define measurable success criteria (e.g., secure coding adoption rates, vulnerability SLAs) and report outcomes to leadership

• Ensure coordinated response and remediation for vulnerabilities, leveraging learnings to continuously strengthen processes

• Improve security processes, tools, and automation to scale security across the organization

Job Designation

Hybrid: Employee divides their time between in-office and remote work. Access to an office location is required. (Frequency: Minimum 2 days per week; may vary by team but will be weekly in-office expectation)