Head of Security

Xcede; San Francisco (CA); On-site; USD 150,000 - 200,000; Full time

Job summary

Xcede is seeking a Head of Security in San Francisco, responsible for defining and owning the security roadmap across products and operations. This player-coach role involves growth of the security team and partnership with engineering to secure product design.

The ideal candidate will have 6–15 years of security engineering experience, with at least 3 years in a leadership role, focused on building a security function from the ground up. The company is a leading AI platform in healthcare, offering an attractive compensation package.

Qualifications

• 6–15 years of experience in security engineering.
• 3+ years leading teams.
• Proven track record of building a security function.

Responsibilities

• Define and own the security roadmap.
• Build, hire, and lead a high-performing security team.
• Own incident response end-to-end.
• Interface with CISOs to strengthen security posture.

Skills

Security Engineering

Team Leadership

Application Security

Threat Modelling

DevSecOps

Job description

Leading AI Platform Clinical Documentation & Coding - Head of Security

I am partnered with the leading AI platform for clinical documentation and coding — trusted by top health systems across North America. As we scale, we're looking for a Head of Security to own and grow our security function end-to-end. This is a player-coach role: you'll set strategy and roadmap while staying hands‑on with architecture, code reviews, and incident investigations.

Overview

• Define and own the security roadmap across product, cloud, corporate systems, and operations — balancing real risk reduction with company velocity
• Build, hire, and lead a high‑performing security team — inheriting 2, growing to 4 by end of year and doubling again by end of next
• Partner with engineering to embed secure‑by‑default patterns into product design and shipping
• Own incident response end‑to‑end: detection, investigation, communication, and systemic fixes
• Interface with CISOs at large health systems to strengthen security posture and enable enterprise sales — turning security maturity into a revenue driver
• Lead security reviews, audits, and customer conversations (HIPAA, SOC 2) to build and maintain trust
• Oversee identity, device security, internal systems, and access controls as the company scales

Skills required

• 6–15 years of experience in security engineering, with 3+ years leading teams
• Proven track record of building a security function from scratch at a scaling startup
• Comfortable as a player‑coach — equally at home setting strategy and rolling up your sleeves on technical work
• Strong grasp of application security, cloud security, threat modelling, IAM, and DevSecOps
• Experience in healthcare, fintech, or other highly regulated industries is a strong bonus

This role is ideal for someone who wants genuine ownership at a high‑growth AI healthcare company backed by the top VCs in the induistry. You'll have the scope to shape a security function that directly supports enterprise deals, patient data protection, and a platform used across 100+ clinical specialties — with a comp package to match the responsibility.