Security Lead (US)

We are looking for a Security Lead with 5+ years of experience to own the entire security program as the first dedicated security hire at a fast-growing startup handling highly sensitive enterprise data. You'll step into a role with massive ownership, building out cloud security, data governance, access controls, and SOC 2 compliance across products, pipelines, and people. This is a hands-on IC role where you'll write code, review architecture, and make real security decisions, not just write policies. You'll work directly with the engineering team and leadership to ensure the company is secure, not just performatively secure.

What you will be doing

• Building and owning the company-wide security program from scratch, covering cloud infrastructure, application security, data governance, and employee/people security
• Designing and implementing access controls, just-in-time permissions, and data governance policies to protect sensitive customer data flowing through the platform
• Leading the SOC 2 certification process end-to-end, working with an existing vendor to get compliant and stay compliant
• Threat-modeling product, data pipeline, and AI workflows, then building the actual technical controls to address the highest-consequence risks
• Creating secure defaults and tooling so the engineering team can move fast without creating security incidents