Head of Security
$200,000–$250,000 year
Hybrid · New York City, New York, United States or San Francisco, California, United States
Job Summary
Lead Tatari's Security Engineering team and partner with Engineering leadership to secure a AWS-based SaaS platform. Build and execute the security roadmap across application, infrastructure, and corporate security; own incident response end-to-end; oversee detection and monitoring in the AWS environment; manage risk intake, triage, and reporting; guide Security Policy Advisory Group and internal/external documentation and training; collaborate with Legal on privacy obligations; ensure secure development lifecycle integration; manage customer-facing security assessments and security review calls; report posture and program maturity to executives and the board; maintain relationships with external cybersecurity vendors. Hybrid in-office work model with 2 days/week in the office across Los Angeles, New York, and San Francisco. Requires leadership of information security teams, AWS/Kubernetes security expertise, incident response experience, risk management program development, and a track record of building and scaling security programs, with SOC 2 and other frameworks experience; AI-driven security workflows experience is a plus.
Required Qualifications
- Meaningful time leading information security teams at a high-growth SaaS company
- Strong AWS and Kubernetes security expertise (IAM, networking, data protection, and threat detection)
- Led incident response, including stakeholder communication and post-mortems
- Built or significantly scaled a security risk management program
- Track record of hiring, developing, and retaining security engineers
- Broad knowledge across application, infrastructure, and corporate security, with deep expertise in multiple areas
- Led security programs through SOC 2 and additional frameworks
- Hands-on use of AI in security workflows (threat detection, vulnerability management)
- Working knowledge of how LLMs introduce new attack surfaces
- Industry-recognized security certifications are a plus
This role has closed. Sorce can match you with similar open roles and apply on your behalf.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.