Head of Security

Tatari; San Francisco (CA); Hybrid; USD 200,000 - 250,000; Full time

Benefits offered by this job

Health insurance

Equity compensation

401K

FSA

Commuter benefits

Continued education benefit

Newbie Productivity Perk

Unlimited PTO

Wellness Day Off

Snacks & catered lunches

Team building events

Hybrid RTO 2 days a week

Job summary

Tatari is seeking a hands-on security leader to guide our Security Engineering team. You’ll report to the SVP of Engineering, own the security roadmap for our AWS-based SaaS platform, and work with engineering leadership to meet and exceed industry security standards.

In this role you’ll set strategy, grow the team, and execute security programs across application, infrastructure, and corporate security, including incident response, risk management, privacy collaboration, and executive-facing

Qualifications

• Experience leading information security teams at a high-growth SaaS company.
• Strong AWS and Kubernetes security expertise, including incident response.
• Proven ability to scale a security risk management program.
• Track record hiring, developing, and retaining security engineers.
• SOC 2 and other frameworks experience.
• Hands-on use of AI in security workflows.
• Industry certifications such as CISSP or CISM are a plus.

Responsibilities

• Build and execute Tatari's security roadmap across application, infrastructure, and corporate security
• Own incident response end-to-end and communicate with executives
• Own detection and monitoring across the AWS environment
• Run the risk management program with clear leadership visibility
• Lead Security Policy Advisory Group and develop internal policies, external-facing documentation, and security training
• Partner with Legal on privacy program (CCPA and US state laws)
• Collaborate with Engineering to weave security into the development lifecycle
• Own customer-facing security questionnaires, due diligence, attestations, and security review calls
• Report posture and program maturity to exec staff and board
• Manage relationships with external cybersecurity vendors

Skills

Security leadership

AWS security

Kubernetes security

Incident response

Security risk management

Security program development

AI in security workflows

Security certifications (CISSP/CISM)

Job description

Tatari is on a mission to revolutionize TV advertising. Founded in 2016 to help transform the antiquated world of TV advertising through the intelligent application of AI and machine learning, Tatari helps some of the world’s fastest growing brands including Chime, Calm, Tecovas, Manscaped, Saatva, and Liquid I.V., reach their customers using linear and streaming TV ads. Our platform combines sophisticated media buying with proprietary analytics to turn TV advertising into an automated, digital-like experience, enabling businesses of any size to advertise on TV.

We’re a late-stage AdTech company with strong internal alignment on security, a recently attained SOC 2 Type II attestation, and a clear mandate to mature our security and privacy posture.

We’re looking for the right leader to make it happen.

The Role

You’ll lead our existing Security Engineering team, reporting to the SVP of Engineering and work closely with Engineering leadership to develop a deep understanding of our AWS-based SaaS platform and operational environment, then build and execute the roadmap to meet, and exceed, industry security standards.

This is a hands‑on leadership role of a small but talented Security team. You’ll set strategy, grow your team, and drive hands‑on technical execution when necessary.

Responsibilities

• Build and execute Tatari's security roadmap across application, infrastructure, and corporate security
• Own incident response end-to-end (detection, containment, communication, post-mortem), and serve as the Security representative to executives
• Own detection and monitoring across our AWS environment
• Run our risk management program (intake, triage, acceptance, reporting), ensuring leadership receives clear and actionable visibility into our risk posture
• Lead our Security Policy Advisory Group and develop internal policies, external‑facing documentation, and security training
• Partner with Legal on our privacy program as it evolves to meet AdTech‑specific obligations (CCPA and other US state privacy laws)
• Partner with Engineering teams to enable seamless integration of security best practices throughout the development lifecycle
• Own customer‑facing security: questionnaires, due diligence, compliance attestations, and security review calls
• Report up to exec staff and board on posture, incidents, and program maturity
• Manage relationships with external cybersecurity vendors

Qualifications

• Meaningful time leading information security teams at a high‑growth SaaS company
• Strong AWS and Kubernetes security expertise (IAM, networking, data protection, and threat detection)Led incident response, including stakeholder communication and post‑mortems
• Built or significantly scaled a security risk management program
• Track record of hiring, developing, and retaining security engineers
• Broad knowledge across application, infrastructure, and corporate security, with deep expertise in multiple areas
• Succeeded in leading security programs through SOC 2 and additional frameworks
• Hands‑on use of AI in security workflows (threat detection, vulnerability management, security automation), including working knowledge of how LLMs introduce new attack surfaces
• Industry‑recognized security certifications (e.g., CISSP, CISM) are a plus
• Total compensation ($200,000-$250,000)
• Equity compensation
• Health insurance coverage for you and your dependents
• 401K, FSA, and commuter benefits
• $150 monthly spending account
• $1,000 annual continued education benefit
• $500 Newbie Productivity Perk
• Unlimited PTO and sick days
• Monthly Company Wellness Day Off
• Snacks, drinks, and catered lunches at the office
• Team building events
• Hybrid RTO of 2 days per week in office

At Tatari, we believe in the importance of cultivating teams with diverse backgrounds and offering equal opportunities to all. We strive to create a welcoming, inclusive environment where every team member feels valued and diversity is celebrated.