Lead, Cloud Security

A VC-backed data infrastructure startup is seeking a hands-on Security Lead to build and own its security program. As the first dedicated security hire, you will work closely with engineering and leadership to protect sensitive enterprise data and help the company grow securely. This is an individual contributor role with broad technical ownership across cloud infrastructure, products, data pipelines, and people security. What You’ll Do

• Build and own the company-wide security program, covering cloud and application security, data governance, and employee security.
• Design and implement access controls, just-in-time permissions, and data governance policies for sensitive customer data.
• Lead the SOC 2 certification process and ongoing compliance work with an existing vendor.
• Threat-model products, data pipelines, and AI workflows, then implement technical controls for the most consequential risks.
• Create secure defaults and tools that help engineers move quickly while reducing security risks.
• Write code, review architecture, and make hands-on security decisions in partnership with engineering.

• At least 5 years of experience as a security engineer or software engineer.
• Experience founding a security function, joining as an early security hire at a venture-backed startup, or leading a security team in a high-performing engineering environment.
• Hands-on experience with AWS, cloud and application security, IAM, authorization, multi-tenant systems, secrets management, data governance, SIEM, and infrastructure as code.
• Experience with SOC 2, sensitive customer data, data pipelines, and AI/ML security is valuable.
• An engineering background, strong STEM fundamentals, and a track record of sustained experience in roles.