Head of Security

Code Metal; United States; Hybrid; USD 180,000 - 280,000; Full time

Benefits offered by this job

Flexible hybrid work

401k / IRA

Uncapped vacation & holidays

Relocation assistance

Health care plan

Job summary

Code Metal is seeking a Head of Security to lead, mature, and scale our security program as the company grows. You will own security strategy and technical direction across our products, offerings, infrastructure, corporate systems, and development environments.

You will work closely with engineering, IT, legal, compliance, our FSO, and company leadership to ensure our security posture meets the needs of defense, government, and enterprise customers.

Qualifications

• 10+ years of cybersecurity and compliance leadership.
• Experience maturing security programs in highly technical organizations.
• Strong collaboration with engineering, executives, customers and government partners.
• U.S. citizenship and ability to obtain/maintain a U.S. government clearance.
• Experience with CUI, classified systems, SCIFs or high-assurance environments.
• Familiar with NIST 800-171, CMMC, SOC 2, ISO 27001, GDPR.

Responsibilities

• Own security strategy, priorities, and roadmap across products, offerings, infrastructure and development environments.
• Lead security operations: identity and access management, vulnerability management, monitoring and incident response.
• Lead product security and ensure security is integrated throughout the software development lifecycle.
• Partner with Legal, FSO, and Operations to translate regulatory, contractual, and customer requirements.
• Collaborate with engineering to establish practical security architecture, standards, and controls.

Skills

Security leadership

Security architecture

Risk management

Security operations

Cloud security

Regulatory compliance

Incident response

DevSecOps

Communication skills

Government customers

Job description

• Code Metal is looking for a Head of Security to lead, mature, and scale our existing security program as the company grows
• This person will own security strategy and technical direction across our products, offerings, infrastructure, corporate systems, and development environments
• You will work closely with engineering, IT, legal, compliance, our FSO, and company leadership to ensure our security posture meets the needs of defense, government, and enterprise customers
• Own and evolve Code Metal’s cybersecurity strategy, priorities, and roadmap
• Lead security across our products, infrastructure, corporate systems, and development environments
• Partner with engineering teams to establish practical security architecture, standards, and controls
• Oversee core security operations, including identity and access management, vulnerability management, monitoring, and incident response
• Lead product security and ensure security is integrated throughout the software development lifecycle
• Own the security aspects of regulatory, compliance, and customer requirements
• Partner with our FSO and technical teams on cybersecurity requirements for CUI and classified environments
• Partner with Legal, the FSO, and Operations to translate regulatory, contractual, and customer security requirements

Benefits

• Flexible hybrid work arrangement
• Retirement Plan (401k, IRA)
• Paid Time Off (Uncapped Vacation, plus Sick & Public Holidays)
• Relocation assistance for qualifying employees
• Health Care Plan (Medical, Dental & Vision)

• This is a senior leadership role for someone who is technically strong, comfortable making risk-based decisions, and able to operate effectively with engineers, executives, customers, and government partners
• Broad technical depth across product, cloud, infrastructure, and enterprise security
• Strong understanding of security architecture, risk management, security operations, privacy and compliance requirement and incident response
• 10+ years of cybersecurity and compliance experience with meaningful security leadership responsibility
• Experience owning or significantly maturing security programs within highly technical organizations
• Experience working closely with engineering organizations and influencing technical decisions
• U.S. citizenship and ability to obtain and maintain a U.S. government security clearance
• Strong judgment and the ability to communicate security risks and priorities to technical and non-technical audiences
• Experience supporting defense, government, or other highly regulated customers
• Experience with CUI, classified systems, SCIFs, or other high-assurance environments
• Experience with moving into new markets and jurisdictions and understanding the compliance requirements for new regions
• Familiarity with relevant government and industry security frameworks, such as NIST 800-171, CMMC, SOC 2, ISO 27001, GDPR or EU AI
• Experience securing modern cloud-native and AI-enabled products
• Active U.S. government security clearance