Security Lead

Sable; San Francisco (CA); In loco; USD 150.000 - 190.000; Tempo pieno

Descrizione del lavoro

Sable is seeking a dedicated Security Engineering lead to own and advance security across all surfaces, including browser environments, credentials, and data. You will shape data-handling controls, access management, and the company’s compliance program, ensuring robust protection for customers and internal users alike.

You will drive threat modeling for new surfaces, implement preventative systems, and collaborate with engineering to address CVEs.

Competenze

• Experience in security engineering for cloud infrastructure.
• Ability to translate risk into concrete security controls.
• Comfort leading discussions with customers’ security teams.

Mansioni

• Own security across browser environments, credentials, secrets, and data.
• Define and enforce data-handling and access-control standards enterprise-wide.
• Maintain ISO 27001 & 42001 and SOC 2 Type II controls and evidence.

Conoscenze

Cloud security

Security engineering

IAM & secrets

Threat modeling

Incident response

Strumenti

Kubernetes

Descrizione del lavoro

ABOUT SABLE

Sable built Aidan, the first AI employee who leads customer calls using realtime voice, vision, and browser use. Aidan runs a live, two-way conversation inside a real product environment, clicking through the product like a human, watching the user's screen, and adapting the journey on the fly. Every conversation feeds a self-improving context graph we call the Brain, so Aidan gets smarter with each call.

THE ROLE

You own security at Sable. You'll set and enforce the standards that let enterprises trust us with their customers and data: data handling, access control, endpoint security, and the compliance program.

WHAT YOU'LL DO

• Own security across every surface: browser environments, credentials, secrets, customer and internal data

• Own data-handling and access-control standards, and implement enterprise-level best practices across every surface

• Own our compliance program: maintain ISO 27001 & 42001 and SOC 2 Type II controls and evidence

• Threat-model new surfaces (realtime voice, vision, browser use, and the Brain) and establish preventative systems for engineering before they ship

• Manage and be up to date on CVEs and resolves with your own contributions and collaboration within engineering

• Build detection, logging, and incident response systems

WHO YOU ARE

• Experience in security engineering for cloud infrastructure: container orchestration (Kubernetes), IAM, network isolation, and secrets management

• You write the fix yourself, not just the finding, and you match controls to real risk so a small team keeps moving fast

• Comfortable leading conversations with customers' security teams and holding the room

• Excited to be the first dedicated owner of security, and to build the guardrails that let a small team operate like an enterprise

• Bonus: securing multi-tenant or sandboxed browser/computer use systems; running compliance audits; experience with LLM agent risks such as prompt injection and data exfiltration