Skip to content
TremendousTremendousUnited States

Head of Security

The first security leader will own Tremendous' end-to-end security posture, including product security, incident response, identity, vendor risk, and AI security. This player-coach role requires hands-on experience scaling security programs, strong engineering judgment, and the ability to build a future team.

250k – 330k/yr
Remote8+ YOESecurity Engineering

About the role

Responsibilities

  • Own Tremendous' security posture end-to-end, partnering with engineering on production infrastructure and code security.
  • Assess security gaps, prioritize them, and address the highest-leverage gaps first.
  • Treat incident response as a core function, ensuring incidents are contained and response procedures are clear.
  • Drive security as a cultural shift across the company by introducing controls incrementally and working collaboratively with teams.
  • Lead the company's AI-security posture, managing risk while enabling responsible use of AI tooling.
  • Define when and how to staff the security function, and hire the team.

Requirements

  • Hands-on security experience at a company that scaled, ideally as an early security hire during high growth.
  • Deep experience in at least one core security domain: product or production security, security operations, or access, identity, and policy.
  • Broad understanding across security domains and experience defining security posture rather than merely executing an established playbook.
  • Engineer's mindset, including the ability to use code to solve problems, read a codebase, and understand infrastructure.
  • Ability to assess practical risk, exercise sound judgment, and balance best practices with business needs.
  • Strong communication and collaboration skills, with the ability to bring teams along through significant change.

Nice-to-haves

  • Experience building or co-building a small security team.
  • Fintech, payments, or regulated-industry experience.

Compensation and Benefits

  • Base salary of $250,000–$330,000, plus meaningful equity.
  • Fully remote work from anywhere in the Americas.
  • Budget for security tools and a $5,000/month AI tools budget.
  • Opportunity to define the security function, with budget for required tools and team.

Skills

Ruby on RailsTypeScriptReactPostgresGCPIncident Responseproduct securityproduction securitysecurity operationsidentity and access managementai securityvendor securityPenetration Testingsecurity scanning

Similar roles

Security Engineering jobs
Trail of Bits

Engineering Director, Application Security

Trail of BitsUnited States

Leads Application Security practice performing code audits, vulnerability research, and secure design reviews. Hands-on leader managing team, P&L, client relationships; requires 10+ years security experience and proficiency in multiple languages.

250k – 300k/yrRemote10+ YOESecurity Engineering
DuckDuckGo

Privacy Engineering Director

DuckDuckGoUnited States

Lead privacy engineering initiatives across private browsing, search, and agentic products. Own complex privacy projects from definition to delivery, evolve review processes, and grow privacy engineering talent.

244k – 244k/yrRemote10+ YOESecurity Engineering
Moment

Head of Security

MomentNew York, NY

Own the end-to-end security program for a fintech infrastructure company, driving strategy, compliance (SOC 2), incident response, and client-facing security reviews for institutional trading systems.

275k – 325k/yrOn-siteSecurity Engineering
Stellar

Director, Ecosystem Product Security

StellarSan Francisco, CA +1

Leads security strategy for Stellar blockchain ecosystem and Foundation systems, raising security standards for wallets, validators, and infrastructure. Owns outcomes for high-stakes software/infrastructure, builds security team, and drives cross-team improvements. Requires 10+ years security experience with blockchain expertise.

225k – 335k/yrHybrid10+ YOESecurity Engineering
Harvey

Head of Security Engineering

HarveySan Francisco, CA

Lead Harvey's Product Security organization by building a team of embedded Product Security Engineers, defining security standards, and partnering with Engineering/Product leadership to embed security-by-design into AI-native software for professional services. Requires leadership experience in AppSec/Product Security at high-growth tech companies plus strong engineering background.

285k – 350k/yrHybrid8+ YOESecurity Engineering