Head of Security
Lead security engineering team and roadmap for a late-stage AdTech SaaS company. Own incident response, risk management, AWS/K8s security, and compliance programs including SOC 2.
About the job
Responsibilities
- Build and execute Tatari's security roadmap across application, infrastructure, and corporate security
- Own incident response end-to-end (detection, containment, communication, post-mortem), and serve as the Security representative to executives
- Own detection and monitoring across our AWS environment
- Run our risk management program (intake, triage, acceptance, reporting), ensuring leadership receives clear and actionable visibility into our risk posture
- Lead our Security Policy Advisory Group and develop internal policies, external-facing documentation, and security training
- Partner with Legal on our privacy program as it evolves to meet AdTech-specific obligations (CCPA and other US state privacy laws)
- Partner with Engineering teams to enable seamless integration of security best practices throughout the development lifecycle
- Own customer-facing security: questionnaires, due diligence, compliance attestations, and security review calls
- Report up to exec staff and board on posture, incidents, and program maturity
- Manage relationships with external cybersecurity vendors
Qualifications
- Meaningful time leading information security teams at a high-growth SaaS company
- Strong AWS and Kubernetes security expertise (IAM, networking, data protection, and threat detection)
- Led incident response, including stakeholder communication and post-mortems
- Built or significantly scaled a security risk management program
- Track record of hiring, developing, and retaining security engineers
- Broad knowledge across application, infrastructure, and corporate security, with deep expertise in multiple areas
- Succeeded in leading security programs through SOC 2 and additional frameworks
- Hands-on use of AI in security workflows (threat detection, vulnerability management, security automation), including working knowledge of how LLMs introduce new attack surfaces
- Industry-recognized security certifications (e.g., CISSP, CISM) are a plus
Benefits
- Total compensation ($200,000-$250,000)
- Equity compensation
- Health insurance coverage for you and your dependents
- 401K, FSA, and commuter benefits
- $150 monthly spending account
- $1,000 annual continued education benefit
- $500 Newbie Productivity Perk
- Unlimited PTO and sick days
- Monthly Company Wellness Day Off
- Snacks, drinks, and catered lunches at the office
- Team building events
- Hybrid RTO of 2 days per week in office
Skills
Aws Security, Kubernetes Security, IAM, Incident Response, Risk Management, SOC 2, Security Automation, Threat Detection, Vulnerability Management, Cissp
Similar jobs
Security Engineering jobs
LogicGate
Chicago, ILLeads LogicGate’s internal security organization, compliance posture, risk management, and customer trust program while serving as Deputy CISO. Requires 7–10 years of information security experience, substantial people leadership, SaaS compliance expertise, and strong technical knowledge of modern security architectures.
Chronograph
Brooklyn, NY
Leads Chronograph’s information security and IT strategy, combining executive leadership with hands-on oversight of cloud, application, AI, corporate, and compliance security. Requires at least seven years of security experience, broad technical depth, assurance-program leadership, and strong executive communication.
Greenboard
New York, NY
Leads technical security, compliance (SOC 2, GDPR, ISO 42001), vulnerability management, and infrastructure hardening for a fast-growing fintech. Requires 3-7 years in security engineering with hands-on AWS, vuln tooling, and audit experience.
GameChanger
United States
Leads GameChanger’s Information Security and Technology strategy, teams, roadmap, and risk decisions, with primary focus on product and application security. Requires 10+ years of security experience, broad security-program leadership, and experience managing technical leaders and partnering with Engineering and executives.
Idme
Mountain View, CA
Leads ID.me’s Product Security program and security engineering team, partnering with Product and Engineering to reduce risk through practical, developer-aligned controls. Requires strong technical depth across application and cloud security, outcome-based leadership, and experience building security programs in fast-moving cloud-native environments.