Responsibilities
- Enhance overall security by leading improvements in cloud infrastructure, operational practices, and internal IT systems.
- Develop secure-by-default tools and automation that guide developers toward safe coding and deployment patterns.
- Implement and manage identity and access management controls to eliminate gaps across technical layers.
- Continuously identify, assess, and prioritize security initiatives to advance the long-term roadmap.
- Focus on high-impact efforts while balancing immediate fixes with strategic upgrades across multiple domains.
- Take initiative without waiting for direction, proactively identifying and addressing security needs.
- Develop a deep understanding of current risks and consistently drive measurable risk reduction.
- Lead incident response activities and manage ongoing external security operations.
- Establish and maintain a 24/7 incident detection and response capability.
- Manage inbound security reports, triage vulnerabilities, oversee penetration tests, and coordinate remediation.
- Take direct action to resolve security issues when possible.
- Ensure ongoing compliance with current standards and lead efforts to achieve new certifications.
- Maintain active SOC 2 compliance and associated controls.
- Pursue additional certifications such as ISO 27001 to meet enterprise requirements.
- Promote a strong security culture through organization-wide awareness initiatives.
- Educate developers on secure coding practices to prevent vulnerabilities at the source.
- Conduct regular phishing simulations to test and improve employee vigilance.
- Foster collaboration with engineering teams to position security as a supportive function.
- Encourage voluntary adherence to security best practices by making them intuitive and valuable.
Benefits
- Competitive salary aligned with market standards
- Significant equity offering
- Extensive health coverage for employees and dependents, including 99% cost coverage
- Flexible vacation, holidays, and a winter break for rest and renewal
- Paid leave for new parents
- Remote-first environment with quarterly in-person team gatherings
Work Arrangement
Remote (Worldwide)
Other
Remote-first, with quarterly team off-sites
