Head of Security

Join Code Metal as the Head of Security, where you will lead and scale our existing security program. You will own the security strategy and technical direction across our products, infrastructure, corporate systems, and development environments. This senior leadership role requires a strong technical background, experience in cybersecurity and compliance, and the ability to communicate security risks to both technical and non-technical audiences.

• Evoluer et diriger la stratégie de cybersécurité de Code Metal, en établissant des priorités et une feuille de route.
• Collaborer avec les équipes d'ingénierie pour établir une architecture de sécurité pratique, des normes et des contrôles.
• Superviser les opérations de sécurité essentielles, y compris la gestion des identités et des accès, la gestion des vulnérabilités, la surveillance et la réponse aux incidents.

• This is a senior leadership role for someone who is technically strong, comfortable making risk-based decisions, and able to operate effectively with engineers, executives, customers, and government partners
• Broad technical depth across product, cloud, infrastructure, and enterprise security
• Strong understanding of security architecture, risk management, security operations, privacy and compliance requirement and incident response
• 10+ years of cybersecurity and compliance experience with meaningful security leadership responsibility
• Experience owning or significantly maturing security programs within highly technical organizations
• Experience working closely with engineering organizations and influencing technical decisions
• U.S. citizenship and ability to obtain and maintain a U.S. government security clearance
• Strong judgment and the ability to communicate security risks and priorities to technical and non-technical audiences
• Experience supporting defense, government, or other highly regulated customers
• Experience with CUI, classified systems, SCIFs, or other high-assurance environments
• Experience with moving into new markets and jurisdictions and understanding the compliance requirements for new regions
• Familiarity with relevant government and industry security frameworks, such as NIST 800-171, CMMC, SOC 2, ISO 27001, GDPR or EU AI
• Experience securing modern cloud-native and AI-enabled products
• Active U.S. government security clearance