D

Druva

Cloud data protection and management SaaS

Field CTO

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeSanta Clara, CA, USAIn-person

About the Job

Requirements

  • At least 12 years of direct, hands-on cybersecurity practitioner experience.
  • Deep expertise in identity and access management, including hands-on experience with identity providers such as Microsoft Entra ID (Azure AD), Active Directory, and Okta.
  • Strong working knowledge of identity security and identity threat detection and response, including how identity systems are attacked, hardened, monitored, and recovered.
  • Understanding of identity-based attack techniques and how they map to the MITRE ATT&CK framework, including credential theft, Kerberoasting, Golden Ticket, DCSync, token theft, multi-factor authentication bypass, and privilege escalation; ability to recover a compromised directory or identity provider after a breach.
  • Familiarity with identity architecture and standards, including single sign-on, multi-factor authentication, federation (SAML, OIDC, OAuth), SCIM provisioning, privileged access management, and hybrid and cloud identity models.
  • Experience leading or mentoring technical teams, coaching specialists who are not yet deep in a domain, and serving as the team's subject matter expert.
  • Strong and comprehensive understanding of forensics and recovery processes.
  • Ability to present to internal and external executive-level stakeholders.
  • Understanding of real-world breaches and the protection measures required for resilience.
  • Ability to explain complex security topics to non-technical audiences.
  • Familiarity with the MITRE ATT&CK framework, threat actor groups, and their tactics, techniques, and procedures.
  • Knowledge of public cloud environments (AWS, GCP, Azure), SaaS architectures, and their security implications.
  • Familiarity with differences in security practices across industry segments and verticals.
  • Knowledge of security foundations across data security, security architecture and maturity, ZTNA, SASE, EDR/MDR, and BCP/DR.
  • Credibility in SaaS platform and data-protection architecture.
  • Experience influencing enterprise buying decisions in a presales, advisory, or evangelist capacity.
  • Awareness of sales and marketing processes.

Responsibilities

  • Drive security and identity strategy conversations with top customers or prospects and articulate Druva’s security and identity resilience value proposition.
  • Build trusted relationships with C-level technology peers, including CIOs, CISOs, CTOs, and CDOs.
  • Manage Druva’s global SME team, set priorities, coach team members, and raise the team’s security fluency.
  • Serve as Druva’s senior identity subject matter expert; lead identity-focused customer conversations, architecture reviews, and technical wins; and act as the escalation point for the SME team and Sales Engineering on identity-provider and directory-related questions involving Entra ID, Active Directory, and Okta.
  • Coach SMEs on identity concepts, attack paths, and recovery scenarios so identity fluency scales across the team.
  • Help build written or recorded security thought-leadership collateral and speak at industry events to build Druva’s security and identity brand.
  • Understand customers’ security and identity pain points across industry segments and verticals, and feed insights into internal product and strategy prioritization processes.
  • Work with Product, Marketing, and Sales teams to define messaging and outreach strategies targeting security and identity personas.
  • Collaborate on security-focused Customer Advisory Board engagements, Druva’s annual security conference, and other customer events.
  • Engage with industry analysts and promote Druva’s security and identity resilience value proposition.
  • Drive internal security field-education initiatives on attacks, attacker tactics, techniques and procedures, and attacker mindsets, including identity-based attacks such as credential theft, privilege escalation, and directory compromise.
  • Understand the competitive landscape and help position Druva product differentiation.
  • Engage with industry groups focused on Druva’s areas of interest and contribute to the community.
  • Engage with channel partners on joint go-to-market initiatives.

Desired Qualifications

  • Experience defending, responding to, or recovering from ransomware incidents.
  • Past experience running incident response engagements, security operations center teams, or crisis management teams.

About the Company

cb

Druva

Cloud data protection and management SaaS

Druva provides data protection and management for the cloud era using a SaaS Cloud Platform built on AWS. It protects enterprise data, ensures resiliency, accessibility, and scalability across global operations without manual interventions. Its product works by delivering cloud-based backup, disaster recovery, and data governance as a service, eliminating on-prem hardware and heavy software management. Druva differentiates itself by offering a globally accessible, autonomous, scalable cloud solution that reduces customers' data protection costs and supports large enterprises across industries. The goal is to give businesses reliable, scalable data resiliency and management through a subscription model that yields recurring revenue while enabling cost savings for customers.

Company size
1,001-5,000
Company stage
Series H
Total funding
$475M
Headquarters
Santa Clara, CA
Founded
2008

Recently Posted Jobs

Explore more opportunities at Druva

See more jobs