Leads enterprise cybersecurity strategy, architecture, risk management, compliance, incident response, vulnerability management, IAM, cloud and application security, and DevSecOps implementation. The role coordinates audits and penetration testing, embeds security into CI/CD pipelines, guides secure cloud architecture, and mentors security engineers and analysts while partnering with engineering, DevOps, product, compliance, and executive teams.
This is a remote position.
The Security Lead is responsible for defining and executing the organization’s cybersecurity strategy, leading security architecture, managing risk, and ensuring compliance with global security standards. This role works closely with engineering, DevOps, product, compliance, and leadership teams to embed security into all layers of the technology stack.
Key Responsibilities
- Define and lead enterprise-wide cybersecurity strategy and architecture.
- Oversee application, infrastructure, and cloud security across all systems.
- Lead threat modeling, risk assessments, and vulnerability management programs.
- Establish and enforce security policies, standards, and best practices.
- Monitor, detect, and respond to security incidents and breaches.
- Ensure secure software development practices (DevSecOps) are implemented.
- Conduct security audits, penetration testing coordination, and remediation tracking.
- Collaborate with Engineering and DevOps teams to embed security in CI/CD pipelines.
- Ensure compliance with regulatory and industry standards (e.g., ISO 27001, PCI-DSS, GDPR).
- Lead identity and access management (IAM) strategies and controls.
- Provide security guidance for cloud infrastructure and architecture decisions.
- Mentor and develop security engineers and analysts.
Required Qualifications
- 8–15 years of experience in cybersecurity or information security roles.
- Proven experience leading security teams in enterprise or fintech environments.
- Strong knowledge of cloud security, application security, and infrastructure security.
- Experience with incident response, threat detection, and risk management.
- Strong understanding of regulatory compliance frameworks.
- Excellent leadership, communication, and stakeholder management skills.
Technical & Functional Expertise
- Cybersecurity architecture and design
- Cloud security (AWS, Azure, or GCP)
- Identity & Access Management (IAM)
- Vulnerability management and penetration testing coordination
- Secure Software Development Lifecycle (SSDLC / DevSecOps)
- Network security and encryption protocols
- Security monitoring and SIEM tools
- Incident response and disaster recovery planning
- Compliance frameworks (ISO 27001, NIST, PCI-DSS, GDPR)
- Risk assessment and threat modeling
Similar Jobs
Financial Services
Leads cybersecurity architecture and product security initiatives across applications and platforms. Evaluates controls, technologies, and AI-assisted security recommendations; guides risk analysis, threat modeling, remediation, and security posture assessments. Partners with architects, developers, vendors, and business leaders to define scalable security patterns, validate solutions, and improve software development lifecycle controls, resiliency, auditability, and traceability.
Top Skills:
Artificial IntelligenceMachine LearningMobilePublic CloudSoftware Development LifecycleThreat Modeling
Aerospace • Information Technology • Security • Cybersecurity • Defense
Leads security engineering teams and initiatives across federal enterprise environments. Designs and implements cloud, identity, network, application, workload, and data security controls; supports FedRAMP High authorization, ATO packages, continuous monitoring, risk remediation, and compliance. Provides technical leadership for Zero Trust architectures across hybrid and multi-cloud environments, mentors engineers, evaluates security gaps, and coordinates with cloud, infrastructure, DevSecOps, compliance, and operations teams.
Top Skills:
Artificial IntelligenceAws GovcloudCloud SecurityContinuous MonitoringDevsecopsEncryptionFedramp HighIdentity And Access ManagementLoggingMachine LearningMicrosoft Azure GovernmentNetwork SecurityNist Sp 800-53Vulnerability ManagementZero Trust Architecture
Energy • Renewable Energy
Own and manage cybersecurity platforms across enterprise, AWS, and Azure environments. Lead detection engineering, vulnerability management, security hardening, and end-to-end incident response, including investigation, containment, remediation, and post-incident analysis. Coordinate with an MSSP, validate technical controls, support audits, develop operational playbooks, and improve security architecture and automation across IT and cloud environments.
Top Skills:
AWSAzureEdr/XdrIamIso 27001Nerc CipNist CsfSIEMSoarSoc 2Vulnerability Management
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
