Head of Security

Enthought, Inc.; Austin (TX); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Flexible hybrid work

Global collaboration

Security training programs

Job summary

Enthought, Inc. seeks a Head of Security (AI & Infrastructure) to own the company’s information security posture, policy, and day-to-day security operations, with agentic AI at the center of it.

You will define guardrails, manage credentials and access, and ensure data and IP protection across customer engagements. This hands-on role combines security engineering with policy, audits, and customer governance, enabling delivery teams to move fast securely.

Qualifications

• Significant experience building and guiding security programs for cloud and AI-enabled environments.
• Proven ability to translate customer and business requirements into concrete controls.
• Experience in incident response and audit readiness for enterprise deployments.

Responsibilities

• Design end-to-end security and AI governance spanning infrastructure, deployment, and incident response.
• Own AI policy, approved tools, providers, and data handling rules for prompts, code, and data.
• Define guardrails for agentic operations, credentials, audit trails, and blast radius.
• Prevent leakage of credentials, tokens, and customer IP through prompts or tool calls.
• Establish audit capability over agent activity and compliance with controls.
• Review and approve MCP servers, agent tools, and AI services with assessments.
• Own security standards and configuration baselines across systems and deployments.
• Lead incident response planning, exercises, and customer security questionnaires.
• Run workflow approvals for access and permissions with auditability.
• Review IaC, CI/CD, and container configs for secrets management and hygiene.
• Build tooling for policy enforcement and detection across environments.
• Serve as security point of contact for customers and escalation lead for delivery.

Skills

Cloud security

AI governance

Identity & access management

Incident response

Security architecture

Policy writing

DevOps collaboration

Tools

CI/CD

Terraform

Kubernetes

Cloud platforms (AWS/Azure/GCP)

Job description

We are hiring a Head of Security (AI & Infrastructure) to own Enthought’s information security: posture, policy, and day-to-day security operations, with agentic AI at the center of it. We deliver scientific software to large enterprise customers, and our developers increasingly work by directing AI coding agents inside customer codebases and cloud environments. This role decides what those agents may access, how customer data and IP are kept from leaking through them, and writes the AI and security policies our customers audit us against. Every policy it writes has to describe a control that actually exists, one you can build or verify, and it has to let delivery teams keep moving. Security is the core of the job, and you will also share IT and DevOps work alongside our DevOps and Support team, more of it while the security workload ramps up. The work is hands-on and practical rather than compliance-led.

Key Responsibilities

• Design end-to-end security and AI governance for Enthought, applying deep knowledge of cloud architecture, identity, and information security to translate customer and business requirements into controls spanning infrastructure, deployment, agent operations, and incident response.
• Own Enthought’s AI policy: approved tools, providers, and harnesses, which AI tools may be used on which customer engagements, and the data-handling rules for prompts, code, and customer data.
• Define the guardrails for agentic operations. Decide what credentials an agent may hold, for how long, with what audit trail, and with what blast radius.
• Prevent information leaking through agentic work, whether that is credentials and tokens exposed through agent actions or customer IP (formulations, data, code) leaving through prompts, tool calls, and web searches.
• Establish audit capability over agent activity, so we can show what our agents did and not only what they were permitted to do.
• Evaluate and approve MCP servers, agent tools, and AI services, working from automated license, privacy, and vulnerability assessments.
• Own security standards and configuration baselines across corporate systems, product infrastructure, and customer-facing deployments.
• Own identity and access architecture, including least-privilege design and non-human identities. The DevOps and support teams execute against it.
• Lead incident response, and maintain and exercise the incident response plan.
• Handle customer security questionnaires, due-diligence reviews, and audit requests, including customer audit rights over our AI governance, routing anything that becomes a contractual commitment through Contract Administration.
• Run the software approval and resource-access workflows, including making the calls, and ....
• Review infrastructure-as-code, CI/CD, and container configurations for security, and implement secrets management and credential hygiene.
• Build the tooling behind the policies: scanning, detection, audit, and enforcement, automated wherever possible.
• Serve as the security point of contact for customers and the security escalation point for delivery teams.
• Advise consulting teams on AI and data-handling decisions inside customer engagements, including data residency and customer contract terms.
• Lead security awareness and training, including safe use of AI tools.
• Share hands‑on IT support for the Austin office with the DevOps and Support team, including laptop provisioning, onboarding and offboarding, and endpoint security, and contribute to DevOps work where it touches security.
• Work agent-first, using AI tools as your default way to do the work, and set the guardrails that let everyone else do the same safely.

What We Offer

• Meaningful impact. Your work directly advances scientific breakthroughs, from accelerating drug discovery to developing sustainable materials.
• A front‑row seat to agentic AI. We are an automation‑first company where every role directs AI tools, and you will help define how the industry puts them to work.
• World‑class colleagues. You will work alongside some of the smartest, kindest scientists and engineers around.
• Continuous learning. Enthought’s training programs in Python, machine learning, and scientific computing are open to you.
• A global, collaborative culture across our Austin, Cambridge, and Tokyo offices.
• Flexible hybrid work based out of our Austin office.