Chief Information Security Officer (CISO)

1Kosmos Inc.; Woodbridge Township (NJ); Hybrid; USD 180,000 - 320,000; Full time

Benefits offered by this job

Equity package

Hybrid work arrangements

Job summary

1Kosmos is a growth-oriented security-focused startup seeking a hands-on CISO to build and scale security operations from the ground up. You will roll up your sleeves to implement security tooling, drive cloud security, and lead governance programs while shaping a scalable security posture.

The role demands deep technical expertise, strong leadership, and the ability to align security with business goals in a fast-paced environment. EST hours and hybrid work in NY/NJ area are preferred.

Qualifications

• 7+ years in security operations with hands-on experience.
• Deep expertise in cloud security across AWS and Google Cloud (and Azure).
• Directly deploy and configure enterprise security tools.
• Experience with FedRAMP, SOC 2, ISO 27001 certifications.
• Strong leadership and cross-functional communication capabilities.

Responsibilities

• Design, implement, and manage a comprehensive security operations infrastructure.
• Personally configure and deploy security tools (endpoint, SIEM, cloud).
• Build and optimize security monitoring, incident response, and threat detection.
• Drive automation initiatives to reduce manual security work.
• Lead compliance initiatives including FedRAMP, SOC 2, ISO 27001.
• Collaborate with DevOps/engineering for secure software development.
• Communicate security status to leadership and stakeholders.

Skills

Cloud security

Security operations

SIEM

Endpoint protection

CI/CD security

Security automation

FedRAMP

SOC 2 / ISO 27001

Regulatory compliance

Leadership

Communication

DevOps collaboration

Education

Bachelor's degree in a related field

Tools

CrowdStrike

SIEM

AWS

Google Cloud

Azure

CI/CD tools

Job description

About 1Kosmos

1Kosmos is a growing startup revolutionizing identity and authentication solutions. We're seeking a hands-on security leader who thrives in a technical, fast-paced environment and is ready to build and scale our security operations from the ground up.

About The Role

We're looking for a hands-on security leader to serve as CISO. The candidate must be a highly technical, operationally focused security leader who can roll up their sleeves and directly implement security solutions while building our security posture. This role is ideal for a senior security operations professional ready to transition into strategic leadership while maintaining a deep technical involvement.

Key Responsibilities

• Security Operations Leadership (Primary Focus) Design, implement, and manage a comprehensive security operations infrastructure Personally configure and deploy security tools, including endpoint protection, SIEM, and cloud security solutions Build and optimize security monitoring, incident response, and threat detection capabilities Drive automation initiatives to eliminate manual inefficiencies in security processes Compliance and Risk Management Lead compliance initiatives including FedRAMP, SOC 2, and other regulatory frameworks Partner with business analysts to navigate regulatory requirements and audits Develop and maintain security policies, procedures, and documentation Manage security risk assessments and remediation programs Technical Security Architecture Secure cloud infrastructure across AWS, Google Cloud, and other platforms Integrate security into CI/CD pipelines, working closely with DevOps teams Implement and manage security tools (CrowdStrike, etc.) across the organization Conduct hands-on security reviews of architecture and code Cross-functional Collaboration Partner directly with development and engineering teams on secure software development Oversee internal IT security (smaller component of role) Communicate security initiatives and status to leadership and stakeholders Coordinate with global teams to ensure consistent security practices

Requirements

• Required Qualifications Technical Expertise Minimum 7+ years in security operations with demonstrated hands-on experience Deep expertise in cloud security (AWS, Google Cloud, Azure) Proven ability to personally deploy and configure enterprise security tools Strong understanding of modern DevOps practices and CI/CD security integration Experience with security automation and orchestration Compliance and Governance Hands-on experience with FedRAMP certification processes Track record of achieving and maintaining SOC 2, ISO 27001, or similar certifications Understanding of regulatory compliance requirements and audit processes Leadership and CommunicationExperience leading security initiatives in fast-growing organizations Strong communication skills for collaborating with global, distributed teams Ability to translate technical security concepts for various stakeholders Comfortable working in a startup environment with evolving requirements

Preferred Qualifications

• Currently in a similar-sized company CISO role, or a Deputy CISO, Director of Security Operations, or similar "CISO minus one" role at a larger organization Experience in identity management or authentication technologies Background in both security operations and security engineering Previous startup or scale-up experience Located in or willing to work EST hours (strong preference for NY/NJ area) Public-facing CISO experience (client communications) is a plus but not required

What We're NOT Looking For

• Pure policy/governance executives without hands-on technical skills Traditional "big company" CISOs focused only on strategy and presentations Candidates who expect to delegate all technical work from day one Security leaders who haven't maintained current technical skills

BenefitsWhat We Offer

• Opportunity to build and shape security at a growing startup Direct impact on product and company security posture Collaborative environment with talented engineering teams Competitive compensation and equity package Flexible work arrangements with preference for hybrid in NY/NJ area