Skip to content
CISO Spotlights

Career profile

David Cross

Chief Information Security Officer, Atlassian

Status
Current role, per sources checked 20 October 2026
Appointed
February 2025
Published

Compiled 20 October 2026 from public records. Each statement below is drawn from the sources listed at the end.

David Cross is the Chief Information Security Officer of Atlassian, appointed in February 2025.

Career path

Cross began his security work with five years of active-duty service in the aviation electronic warfare community of the United States Navy.

He then spent 18 years at Microsoft in a series of security platform, cloud, product and engineering leadership roles.

From Microsoft he moved to Google, where he served as a Director and built the Google Cloud Security Engineering organization over three years, working within Google's Security and Privacy organization on public cloud security engineering.

Cross next joined Oracle, where he spent six and a half years as Chief Information Security Officer for the Oracle SaaS Cloud Security organization, holding the title of Senior Vice President.

Atlassian appointed Cross as its Chief Information Security Officer after his time at Oracle, and the company's announcement noted his earlier security leadership roles at Google and Microsoft.

He is also a Venture Partner with Rain Capital VC.

Education, patents and advisory work

Cross holds a B.S. in Computer Information Systems and an MBA with a Management Information Systems concentration, and he is listed as the named inventor on more than 30 issued patents in security technology.

He serves on Chapman University's Engineering and Computer Science Advisory Board.

Security communications at Atlassian

As Atlassian's CISO, Cross has used the company's community forum to announce product security features directly to customers. In July 2025 he introduced malware scanning for file uploads across Jira, Confluence and Trello, explaining that the feature scans every new attachment using a combination of in-house and third-party detection tools and flags malicious files with a warning before download, with findings available to administrators through the audit log.

David Cross wrote, "In direct response to your valuable feedback, my team has successfully deployed our new malware scanning solution."

In June 2026, Cross announced the second edition of Atlassian's Rovo Security & Trust White Paper, describing it as a document built with security, privacy and product experts to help customers adopt Rovo AI features while addressing AI-specific security, privacy and compliance concerns, available through Atlassian's Trust Portal.

Sources

  1. 1.
    SecurityWeeksecurityweek.com · undated page · checked 20 October 2026 · tier B
  2. 2.
    RSA Conferencersaconference.com · undated page · checked 20 October 2026 · tier A
  3. 3.
    Atlassiancommunity.atlassian.com · undated page · checked 20 October 2026 · tier A
  4. 4.
    chapman.educhapman.edu · undated page · checked 20 October 2026 · tier A
  5. 5.
    Atlassiancommunity.atlassian.com · undated page · checked 20 October 2026 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.