Head of Security (Cloud, Corporate & Physical)

What you'll do

• Own cloud and product security, corporate and physical security, incident response, and the SOC 2 program; lead the IT Engineer.
• Design AI-agent workflows to audit code and infrastructure, triage alerts, support compliance, and secure the company’s AI systems.
• Lead FedRAMP authorization and related compliance work, and represent security with customers, auditors, and public-sector stakeholders.

What they ask for

• 8+ years in security with hands-on experience across cloud, corporate IT, and compliance.
• Central role in a FedRAMP authorization (Rev5 or 20x) and deep knowledge of NIST 800-53.
• Strong cloud security experience; GCP preferred, with deep AWS or Azure experience also accepted.
• Experience building security programs, managing or mentoring staff, and leading SOC 2 or ISO 27001 and third-party penetration testing.

Nice to have

• Hands-on experience with FedRAMP 20x, Key Security Indicators, or automated compliance pipelines; government or higher-education sales experience.
• Eligibility to work on federal systems or an active or past clearance; experience with Vanta, Jamf, Google Cloud, AWS, Cloudflare Zero Trust, Pulumi, or Terraform.

Pay

170,000–220,000 USD base salary

Tools

Google Cloud, Google Workspace, GCP, AWS, Azure, Vanta, Jamf, Cloudflare Zero Trust

AI focus

Build AI-native security, including LLM agents that continuously audit code and infrastructure, automate alert triage and compliance evidence, and secure AI systems against risks such as prompt injection.