Security & Infrastructure Leader (Remote)

Rise Works; United States; À distance; USD 230 000 - 275 000; Plein temps

Avantages offerts par ce poste

Competitive salary

Equity

Healthcare coverage

Unlimited PTO

401(k) with company contribution

Fully remote in the United States

Résumé du poste

Rise is seeking a Head of Security & Infrastructure to own security across cloud, edge, and on-chain surfaces while leading infrastructure reliability. You will partner with the CTO, inherit an existing security program, and drive security-first decisions across a mostly serverless stack.

The role requires deep security engineering, GCP expertise, and the ability to operate with autonomy in a remote, US-only environment.

Qualifications

• 10+ years in security engineering and infrastructure, incl. end-to-end ownership of a security program.
• Hands-on GCP experience with IAM, VPC, Cloud Audit Logs, SCC, Secret Manager, Cloud Run.
• Proven track record in security operations, incident response, and blameless post-mortems.
• Experience embedding security controls into CI/CD and IaC pipelines.

Responsabilités

• Own Rise's security operations across cloud, edge, and on-chain surfaces.
• Harden the infrastructure with zero-trust access, secrets governance, and policy enforcement.
• Build AI-driven security automation and scalable response tooling.
• Lead compliance activities for SOC 2, ISO 27001, and PCI DSS through certification cycles.
• Maintain disaster recovery and reliability processes for a mostly serverless stack.

Connaissances

Security engineering

Cloud security

GCP

Zero Trust

Terraform

Security operations

Incident response

AI tooling in security

Node.js/TypeScript

CI/CD

Outils

Terraform

Cloud Run

BigQuery

Google SecOps

Cloudflare

Node.js/TypeScript

Description du poste

Rise is seeking a Head of Security & Infrastructure to own security across cloud, edge, and on-chain surfaces while leading infrastructure reliability. You will partner with the CTO, inherit an existing security program, and drive security-first decisions across a mostly serverless stack.

The role requires deep security engineering, GCP expertise, and the ability to operate with autonomy in a remote, US-only environment.