Corporate Security & IT Lead

Code Red Partners; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Code Red Partners in San Francisco, partnered with a top VC firm, seeks the first dedicated security engineer to build the security function from the ground up. You’ll report to the CISO as the #2, shaping SecOps, IAM, and cloud security for a ~200-person global org.

You’ll lead hands-on security across multiple pillars and collaborate across regions to create a cohesive security program. This is a unique greenfield opportunity in a high-growth setting.

Qualifications

• 5–7 years of security experience, with foundational security work shaping a security function as a team of one or nearly one.
• Background spanning security engineering, SecOps, detection & response engineering, and identity/IAM with end-to-end controls.
• Experience with modern EDR/XDR tooling (CrowdStrike or similar), Okta/IAM platforms, and Mac-heavy environments (Jamf).
• Comfortable as a hands-on generalist across multiple security pillars, not siloed to one.

Responsibilities

• Build and own security across SecOps, detection & response, identity/IAM, cloud security, data security, and corporate security as a hands-on IC leader.
• Design and automate IAM workflows (joiner/mover/leaver, provisioning/deprovisioning, least-privilege access).
• Stand up SIEM/SOAR capabilities, alert prioritization, and cost-aware log ingestion strategies.
• Manage privileged access and secrets across cloud and on-prem environments for human and non-human identities.
• Centralize security strategy across three global regions, partnering with regional IT leads.
• Nice to have: comfort with hybrid cloud/on-prem infrastructure.

Skills

Security engineering

SecOps

Detection & Response

Identity/IAM

Mac management

Tools

CrowdStrike

Okta

Jamf

Job description

Code Red is partnered with a top VC firm in SF to find their first dedicated security engineering hire.

The Opportunity

This is a true greenfield mandate: a well-established, respected firm that has never had a formal security function. You'll report directly to the CISO as the #2, building security from the ground up across a ~200-person global organization.

Responsibilities

• Build and own security across SecOps, detection & response, identity, cloud security, data security, and corporate security as a hands‑on IC lead
• Design and automate IAM workflows (joiner‑mover‑leaver lifecycle, provisioning/deprovisioning, least‑privilege access models)
• Stand up detection and monitoring capability where none currently exists — SIEM/SOAR strategy, alert prioritization, and cost‑aware log ingestion decisions
• Manage privileged access and secrets across cloud and on‑prem environments, including human and non‑human/service identities
• Centralize security strategy across three global regions, partnering with regional IT leads
• Nice to have: comfort with hybrid cloud/on‑prem infrastructure

Qualifications

• 5–7 years of experience, ideally with 01 foundational security work — you've built a security function as a team of one or near‑one
• Background spanning security engineering, SecOps, detection & response engineering, identity/IAM — someone who's implemented controls end to end, not just touched tools
• Experience with modern EDR/XDR tooling (CrowdStrike or similar), Okta/IAM platforms, and Mac‑heavy environments (Jamf)
• Comfortable operating as a hands‑on generalist across multiple security pillars, not siloed to one