Staff Security TPM: Vulnerability & Delivery Lead

Andreessen Horowitz; San Francisco (CA); Hybrid; USD 243,000 - 284,000; Full time

Benefits offered by this job

Health, dental, vision

Job summary

Andreessen Horowitz in San Francisco is hiring a Staff Security Technical Program Manager to run the operating system of the a16z Security team. You'll own the firm's vulnerability management program, drive cross-team security initiatives, and own the planning rhythm that keeps the team and its stakeholders aligned: sprints, OKRs, timelines, and the documentation and ticketing hygiene that make all of it real.

Security at a16z moves fast and touches every part of the firm.

Qualifications

• 7+ years of technical program management experience, with at least 3 years running security programs.
• Proven track record owning a vulnerability management program at scale.
• Ability to read a finding, understand severity, and discuss risk ratings with reasons.
• Familiar with enterprise security tools and SaaS platforms (Okta, Slack, GSuite).
• Experience with agile planning, OKRs, Jira/Linear, and program reporting.

Responsibilities

• Own security remediation across the firm end to end with clear owners and SLAs.
• Run the vulnerability management program with patching cadence and risk reporting.
• Coordinate cross-team security reviews and keep stakeholders informed on progress.
• Drive cross-team security initiatives from kickoff through delivery.
• Build and run sprint planning and quarterly OKRs for visibility.
• Raise documentation standards with program docs and runbooks.

Skills

Technical program management

Security program leadership

Vulnerability management

Agile execution

Cross-functional collaboration

Written communication

Tools

Jira

Confluence

Notion

Job description

Andreessen Horowitz in San Francisco is hiring a Staff Security Technical Program Manager to run the operating system of the a16z Security team. You'll own the firm's vulnerability management program, drive cross-team security initiatives, and own the planning rhythm that keeps the team and its stakeholders aligned: sprints, OKRs, timelines, and the documentation and ticketing hygiene that make all of it real.

Security at a16z moves fast and touches every part of the firm.