# Head of Security

**Company:** [Tremendous](https://hotfix.jobs/companies/tremendous)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $250k – $330k/yr
**Experience:** 8+ years
**Skills:** Ruby on Rails, TypeScript, React, Postgres, GCP, Incident Response, product security, production security, security operations, identity and access management, ai security, vendor security, Penetration Testing, security scanning
**Posted:** 2026-08-04

> The first security leader will own Tremendous' end-to-end security posture, including product security, incident response, identity, vendor risk, and AI security. This player-coach role requires hands-on experience scaling security programs, strong engineering judgment, and the ability to build a future team.

## Job Description

## Responsibilities
- Own Tremendous' security posture end-to-end, partnering with engineering on production infrastructure and code security.
- Assess security gaps, prioritize them, and address the highest-leverage gaps first.
- Treat incident response as a core function, ensuring incidents are contained and response procedures are clear.
- Drive security as a cultural shift across the company by introducing controls incrementally and working collaboratively with teams.
- Lead the company's AI-security posture, managing risk while enabling responsible use of AI tooling.
- Define when and how to staff the security function, and hire the team.

## Requirements
- Hands-on security experience at a company that scaled, ideally as an early security hire during high growth.
- Deep experience in at least one core security domain: product or production security, security operations, or access, identity, and policy.
- Broad understanding across security domains and experience defining security posture rather than merely executing an established playbook.
- Engineer's mindset, including the ability to use code to solve problems, read a codebase, and understand infrastructure.
- Ability to assess practical risk, exercise sound judgment, and balance best practices with business needs.
- Strong communication and collaboration skills, with the ability to bring teams along through significant change.

## Nice-to-haves
- Experience building or co-building a small security team.
- Fintech, payments, or regulated-industry experience.

## Compensation and Benefits
- Base salary of **$250,000–$330,000**, plus meaningful equity.
- Fully remote work from anywhere in the Americas.
- Budget for security tools and a **$5,000/month AI tools budget**.
- Opportunity to define the security function, with budget for required tools and team.

## Similar roles

- [Engineering Director, Application Security](https://hotfix.jobs/jobs/f5c7154c-b666-4c99-9aba-cb878825ba3b) - Trail of Bits - Remote - $250k – $300k/yr
- [Privacy Engineering Director](https://hotfix.jobs/jobs/7a45a3ca-90d8-4d75-bac1-d9537bd8a64f) - DuckDuckGo - Remote - $244k – $244k/yr
- [Head of Security](https://hotfix.jobs/jobs/c86c14ec-1040-479a-b3ec-7982f44243a9) - Moment - New York, NY - $275k – $325k/yr
- [Director, Ecosystem Product Security](https://hotfix.jobs/jobs/1a713979-c2ef-4231-b621-264f3d938b57) - Stellar - San Francisco, CA - $225k – $335k/yr
- [Head of Security Engineering](https://hotfix.jobs/jobs/2dc6db5f-1f73-4c20-bcf1-9432420bea84) - Harvey - San Francisco, CA - $285k – $350k/yr

**Apply:** https://hotfix.jobs/jobs/8a538acb-2df4-42ab-aee3-c65fe08fbab3
**Canonical:** https://hotfix.jobs/jobs/8a538acb-2df4-42ab-aee3-c65fe08fbab3