Head of Infrastructure & Cloud Security

Greenhouse Software, Inc.; United States; Remote; USD 170,000 - 260,000; Full time

Benefits offered by this job

15 vacation days

10 sick days

Public holidays

Medical budget

Remote work

Educational budget

Language learning budget

Wellness budget

Job summary

Greenhouse Software, Inc. seeks a Head of Infrastructure & Cloud Security to lead security operations across cloud, network, identity, endpoint, and data domains.

You will design and enforce security protocols in a hybrid environment, lead a team of security engineers, promote a cloud-first approach, and report on enterprise security metrics. You will shape the security roadmap, mentor engineers, and collaborate with Platform/SRE to balance security with delivery.

Qualifications

• Proven leadership of security engineering teams.
• Hands-on cybersecurity engineering experience.
• Experience securing on-prem infrastructure in enterprise environments.
• Cloud security expertise across major cloud providers.
• Expertise in EDR/XDR, IAM, KMS and certificate management.
• Familiarity with CSPM/CNAPP/CWPP, WAF, DNS security and IaC scanning.

Responsibilities

• Shape and oversee the infrastructure and cloud security strategy, reporting directly to the CISO.
• Hire, lead, mentor, and develop security engineers and team leads.
• Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions.
• Manage and lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments.
• Collaborate with Platform and SRE teams to manage cloud IAM and security-group guardrails.
• Enhance and manage endpoint security across managed devices, including hardening and telemetry health.
• Own data security and cryptography controls, including KMS, secrets management, PKI, and certificate lifecycle.
• Track, analyze, and report enterprise security metrics.

Skills

Security leadership

Cybersecurity engineering

On-prem security

Cloud security

CSPM tools

WAF/DNS security

EDR/XDR

IAM

Key management

Certificate management

Tools

Wiz

Panorama

Elastic Defender

Entra

CyberArk

Job description

We are seeking a Head of Infrastructure & Cloud Security to lead and develop our security operations across cloud, network, identity, endpoint, and data domains. In this role, you will design and enforce security protocols in a hybrid environment, lead a team of security engineers, promote a cloud-first approach, and report on enterprise security metrics

Responsibilities

• Shape and oversee the infrastructure and cloud security strategy, reporting directly to the CISO
• Hire, lead, mentor, and develop security engineers and team leads
• Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions
• Manage and lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments
• Collaborate with Platform and SRE teams to manage cloud IAM and security-group guardrails
• Enhance and manage endpoint security across managed devices, including hardening and telemetry health
• Own data security and cryptography controls, including KMS, secrets management, PKI, and certificate lifecycle
• Track, analyze, and report enterprise security metrics

Requirements

• Proven experience in leading security engineers and managing teams
• Hands-on experience in cybersecurity engineering
• Strong experience in securing on-premises infrastructure in an enterprise environment
• Experience with any major cloud provider
• Proficiency in cloud and network security, including CSPM/CNAPP/CWPP tools, WAF, DNS security, and IaC scanning
• Experience with EDR/XDR and MDM solutions
• Understanding of identity and access management, including cloud IAM and security-group guardrails
• Experience with KMS, secrets management, PKI, and certificate management
• Ability to enforce security controls without hindering delivery for Platform/SRE/DevOps teams

Will be a plus

• Experience in building or maturing an infrastructure/cloud security function from an early stage
• Background in fintech, brokerage, trading platforms, payments, or regulated environments
• Knowledge of Kubernetes/container security and cloud-native architectures
• Exposure to SOC 2, ISO 27001, or DORA compliance frameworks
• Familiarity with security tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk

We offer

• 15 paid vacation days off year
• 10 paid sick leave per year
• Public holidays as per the company's approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional educational budget
• Language learning budget
• Wellness budget (gym membership, sport gear and related expenses)