Head of Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Take full ownership of Tremendous' security posture from start to finish, collaborating with engineering on both production infrastructure and code security.

• Identify security vulnerabilities, prioritize them, and implement impactful improvements.

• Establish and lead incident response protocols to ensure breaches are managed effectively and response procedures are well-defined.

• Foster a cultural shift towards security across the organization by gradually implementing controls.

• Oversee Tremendous’ AI-security posture by balancing risk management with the integration of AI tools.

• Determine the staffing needs for the security function.

• Recruit and develop the security team.

• Report directly to the VP of Engineering and collaborate closely with the engineering team.

⛳️ Requirements

• Practical security experience at a scaling company, preferably as an early security hire during a phase of rapid growth.

• Extensive expertise in at least one fundamental security domain: product/production security, security operations, or access/identity and policy.

• Sufficient breadth of security knowledge to make informed decisions across various domains.

• Proven experience in defining security posture rather than merely executing pre-existing playbooks.

• An engineering mindset with the capability to leverage code to address challenges.

• Proficiency in reading and comprehending a codebase and infrastructure, including Ruby on Rails, TypeScript, React, PostgreSQL, and Google Cloud.

• Strong judgment in evaluating actual risks and applying security practices to meet business needs.

• Ability to lead organizational change and secure team buy-in.

• Experience in building or co-building a small security team is an advantage.

• Background in fintech, payments, or regulated industries is a plus.

🏝️ Benefits

• Significant equity participation.

• Monthly budget of $5,000 for AI tools.

• Funds allocated for necessary security tools and team development.

• Fully remote work opportunity from any location within the Americas.

• Competitive salary.

• Positive organizational culture.

• High-documentation, low-meeting environment.

• Employee Net Promoter Score (NPS) in the high 80s.