Head of Security

Jobgether; Oregon; Hybrid; USD 180,000 - 270,000; Full time

Benefits offered by this job

Competitive salary

Meaningful equity participation

Fully remote work environment

Generous vacation policy

Wellness budget

Learning & development support

Travel opportunities & teamCollab

Job summary

Jobgether is seeking a Head of Security in the United States to own the security strategy and execution for our technology infrastructure powering the decentralized ecosystem. This hands-on leadership role requires strengthening security across cloud environments, production systems, and engineering platforms.

You will lead incident response, manage risks, and embed security best practices into engineering workflows, while maintaining autonomy to drive critical security decisions and grow the

Qualifications

• 8+ years in cybersecurity for high-availability, internet-facing infrastructure.
• Strong engineering background with ability to read/write code.
• Deep expertise in cloud security, production environments, and distributed systems.
• Hands-on security monitoring, threat detection, incident response, and leadership of real incidents.
• Experience building security programs from the ground up or scaling an existing function.
• Experience securing developer-focused products, APIs, platforms, or critical infrastructure.
• Strong knowledge of IAM, secrets management, cryptographic keys, and infrastructure security practices.
• Ability to develop pragmatic security strategies, assess complex risks, and make sound decisions under pressure.
• Excellent communication and collaboration skills to influence engineering teams and balance business priorities.
• High ownership mentality, adaptability, and willingness to remain hands-on in a fast-moving environment.

Responsibilities

• Define and execute the overall security strategy, roadmap, and priorities across infrastructure, cloud environments, and production systems.
• Own incident response lifecycle, including detection, investigation, mitigation, and tabletop exercises.
• Develop and maintain threat models and risk registers, identifying vulnerabilities and prioritizing initiatives.
• Partner with engineering to integrate security into development processes, architecture decisions, and deployment workflows.
• Assess and manage third-party, vendor, and software supply-chain security risks.
• Lead the compliance roadmap, coordinate security audits, and manage customer assessments.
• Build, hire, mentor, and develop the security team as the organization grows.
• Communicate security risks, incidents, and mitigation strategies to executives and engineers.
• Provide hands-on technical leadership, addressing vulnerabilities and implementing improvements.

Skills

Cybersecurity leadership

Cloud security

Incident response

Security monitoring

IAM & secrets management

Threat modeling

Security architecture

Effective communication

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Head of Security based in the United States. As Head of Security, you will take ownership of the security strategy and execution for a high-performance technology infrastructure powering the decentralized ecosystem. This is a hands‑on leadership opportunity to establish and strengthen security across cloud infrastructure, production systems, and engineering platforms. You will lead incident response, proactively manage risks, and embed security best practices into engineering workflows. Working closely with executive leadership and engineering teams, you will have significant autonomy to make critical security decisions. You will also build and develop the security function as the organization scales. This role is ideal for an experienced security leader who combines deep technical expertise with strategic thinking and a strong sense of ownership.

Accountabilities

• Define and execute the overall security strategy, roadmap, and priorities across infrastructure, cloud environments, and production systems.
• Establish and continuously improve security controls covering identity and access management, secrets and key management, network segmentation, logging, monitoring, and threat detection.
• Own the incident response lifecycle, including detection, investigation, mitigation, recovery procedures, runbooks, on-call readiness, and regular tabletop exercises.
• Develop and maintain threat models and risk registers, identifying vulnerabilities and prioritizing security initiatives according to business impact.
• Partner with engineering teams to integrate security into development processes, architecture decisions, and deployment workflows without slowing down delivery.
• Assess and manage third-party, vendor, and software supply-chain security risks.
• Lead the compliance roadmap, coordinate security audits, and manage customer security assessments and reviews.
• Build, hire, mentor, and develop the security team as the organization grows.
• Communicate security risks, incidents, and mitigation strategies clearly to executives, engineers, and external stakeholders.
• Provide hands‑on technical leadership, independently investigating systems, implementing security improvements, and addressing critical vulnerabilities.

Requirements

• At least 8 years of professional experience in cybersecurity, including securing high‑availability, internet‑facing infrastructure at scale.
• Strong engineering background, with the ability to read and write code, investigate complex systems, and implement technical security solutions independently.
• Deep expertise in cloud security, bare‑metal infrastructure, production environments, and distributed systems.
• Proven hands‑on experience in security monitoring, threat detection, incident response, and leading the response to real‑world security incidents.
• Demonstrated experience establishing a security program from the ground up or significantly scaling an existing security function.
• Previous experience securing developer‑focused products, APIs, platforms, or critical technology infrastructure.
• Strong knowledge of identity and access management, secrets management, cryptographic keys, and infrastructure security practices.
• Ability to develop pragmatic security strategies, assess complex risks, and make sound decisions under pressure.
• Excellent communication and collaboration skills, with the ability to influence engineering teams and balance security requirements with business priorities.
• High ownership mentality, adaptability, and willingness to remain hands‑on in a fast‑moving environment.
• Comfortable working within a fully remote, asynchronous organization.
• Experience leading SOC 2 or comparable compliance audits and previous security leadership experience in a high‑growth startup environment are strong advantages.

Benefits

• Competitive, market‑leading salary.
• Meaningful equity participation.
• Fully remote working environment with flexibility to work from wherever you are most effective.
• Generous vacation policy.
• Wellness budgets to support personal well‑being.
• Learning and professional development support.
• Travel opportunities and support for team collaboration.
• Opportunity to work on high‑impact infrastructure supporting applications used by millions across the decentralized technology ecosystem.
• Significant ownership and influence over technical architecture, security strategy, and organizational growth.
• Opportunity to work alongside a small, experienced, and ambitious engineering team.