Security Lead

As a Security Lead for the Platform Team, you'll set the technical direction for security while staying hands-on. This is a high-leverage role with roughly a 50/50 IC-to-management split: you'll own security architecture and roadmap, drive residual risk down, and lead a team of security engineers, GRC engineers and IT.

What you'll do

• Set the security architecture roadmap: threat model, control framework, key projects (data classification, secrets mgmt, IAM hardening, supply chain).
• Drive residual risk down - own the list, sequence the work, report to leadership monthly.
• Manage security engineers, GRC and IT (1:1s, growth, performance), heavy technical leadership.
• Be the security partner for Eng/Product on new initiatives (AI tooling, Enterprise features).
• Co-own audit readiness with GRC: SOC 2, ISO 27001, customer security reviews.
• Stay hands-on: ship automation and services, harden cloud + code, catch threats early.

What you'll need

• 5+ yrs in product / application / cloud security at a SaaS company.
• Experience prepping for SOC 2 Type II + ISO 27001.
• Has managed or tech-led 2–4 engineers before (formally or as tech lead with people responsibilities).
• Strong on AWS, IAM, K8s, secrets, vuln mgmt, threat modeling, DevSecOps in CI/CD.
• Exposed to Backend / SRE (Python, Bash, Terraform).
• Track record of measurably reducing org-wide risk (not just running programs).
• Influences without authority; can pull Eng/Product toward the right call.
• Deep IC experience - e.g has set the security direction for a meaningful org.

Nice to have

• Fintech / regulated industry experience.
• Security certifications (CISSP, CKS, AWS Security).

What they offer

• Top-of-market equity and cash compensation package.
• Self-development budget for conferences, books, and classes.
• Equipment of your choice including home office set-up.
• Flat hierarchy with direct communication to founding team.
• Experienced mentors and access to network of tech investors and advisors.