wagey.ggwagey.gg
27,751  jobs27,751  jobs
Browse Tech JobsCompaniesFeaturesPricingFAQs
Log InGet Started Free
Jobs(27,751)/Head of Security Role(19)/Allium (12) - Head of Security & IT
Pro members applied to this job 36 hours before you saw itGet Pro ›
Allium

Allium - Head of Security & IT

New York, USA+ Equity3d ago
In OfficeDirectorNAFintechDeveloper ToolsHead of SecurityLater

Requirements

• Typically 6+ years of relevant security engineering, infrastructure security, or corporate security experience, with evidence of independently owning meaningful security improvements. • Recent hands-on experience implementing controls in cloud-based environments. You can investigate a technical issue yourself and work effectively with the engineers who own production systems. • Depth across several relevant areas, including identity, cloud or application security, detection and response, endpoint security, or software supply-chain security. You know when specialist support is needed. • Experience building or improving a security program at a growing technology company, including making tradeoffs with limited time and resources. • Practical judgment about AI-enabled tools: where they can help, how their access should be controlled, and how to validate their behavior and output. • Clear communication with engineers, business leaders, customers, and providers. You can explain a risk, recommend a proportionate response, and follow through. • Enterprise SaaS, data infrastructure, fintech, or another business serving customers with rigorous security requirements. • Securing AI agents, developer tooling, CI/CD, or systems that use non-human identities and third-party integrations. • SOC 2, customer assurance, vendor security reviews, or managing external security and IT providers. • Don't take our word for it, what our customers say about us (https://www.allium.so/blog#love) • What some cool people have to say about us: • The Information's Top 50 Startups (https://www.allium.so/post/allium-named-to-the-informations-50-most-promising-startups-of-2025) • The Information's Top 50 Startups • Mario Gabriele from The Generalist's Future 50 Startup List: https://www.allium.so/post/allium-named-awardee-of-the-generalists-inaugural-future-50-startups • Mario Gabriele from The Generalist's Future 50 Startup List: • Tomasz Tungus from Theory Ventures: https://tomtunguz.com/allium/ • Tomasz Tungus from Theory Ventures: • Bucky Moore from Kleiner Perkins: https://www.kleinerperkins.com/perspectives/allium-series-a/ • Bucky Moore from Kleiner Perkins: • Ok, now for some tough love. Here are the values we strive for at Allium: • Obsessiveness - The best people at Allium cannot put a problem down once they pick it up. We care more about the work than is strictly rational. Institutions trust us because our data is right. Right means caring about the small things. The decoded contract that ships with one wrong field. The label that is 99% accurate but wrong on the address that matters. The query that runs in 4 seconds when it should run in 400 milliseconds. Most companies tolerate these. We do not. • Obsessiveness • Obsessiveness shows up as depth of care. It is not measured in hours worked or visible effort. You should feel something physical when work ships half-right. That instinct is what we hire for. • Pro Athlete Mindset - Consistency. Day in and day out, in pursuit of excellence. A win yesterday does not guarantee (or even imply!) a win tomorrow. I hope anyone who supports a failing sports team will feel the pain (cough Man United fans) of inconsistency • Pro Athlete Mindset • Figure It Out & Extreme Ownership - Every day is unexplored territory. There are new engineering frameworks, new legal docs, new compliance, new sales, new regulations, and new operational procedures every single day. If you don’t know it, learn it. If you can’t learn it, find someone or a product that does it. If you can’t find someone, find someone who can find someone. It is never a lack of resources, but lack of resourcefulness. • Figure It Out & Extreme Ownership • High Agency - (One of) the highest commonalities between all successful people is their responsiveness. Most successful billionaire CEOs still reply to emails within minutes (within working hours). And when you reply, respond fast with effective solutions - and even better, resolutions. If you’re looking for a superpower, you can’t go wrong with responsiveness. Well of course this doesn't make sense when you're an engineer coding in flow, but in general high agency of problem solving gets one very far in life • High Agency • Leading from the Front - No one is going to listen (and adopt) your suggestion unless you lead by example. It’s one thing to say We need to do XYZ this better & it’s another thing to build an MVP and say “This is the way we should do things”. The proof of work and momentum goes a long way. • Leading from the Front • Strong Opinions On the Future (loosely held) - It is okay to be wrong, but what is not okay is not to have an idea of how a better future should be. Alliumites take pride in trying to improving everything about the company all the time. • Strong Opinions On the Future (loosely held) • Sense of (Allium) business smell - There are number of folks who live to eat at Allium, but the Allium smell we are talking about is that we love folks who naturally want to know why and how the work they are doing builds leverage for their teammates and also relates to the business goals • Sense of (Allium) business smell • We invite people of all backgrounds (https://www.allium.so/about). We have engineers who learnt coding much later in life, who learnt coding on the side, we have engineers who are still in school and we also have engineers who went to the top schools (CMU, Stanford, UIUC, UPenn, Oxford, NUS, Cornell), all are welcome if one comes in with a curious mind and an infectious work ethic.

Responsibilities

• Own the security roadmap. Assess our environment, prioritize material risks, and turn priorities into implemented controls with clear owners. Give leadership a concise view of progress, unresolved exposure, and decisions that require their judgment. • Own the security roadmap. • Set the security approach for AI agents. Establish practical standards for agent identities, tool permissions, credential handling, execution isolation, data access, and logging. Partner with Engineering to evaluate coding assistants, model gateways, and integrations, and test for prompt injection, tool misuse, and unintended actions. • Set the security approach for AI agents. • Own employee IT and workforce security. Own the coverage and effectiveness of controls across employee devices, identities, cloud environments, and critical SaaS applications. Track exceptions, assign remediation owners, and build reliable onboarding and offboarding processes. Define how routine IT support is delivered through internal resources or providers. • Own employee IT and workforce security. • Strengthen cloud and software security. Reduce standing privilege and strengthen separation between employee devices, development environments, and production. Establish practical standards for credential storage and privileged access. Partner with Engineering on secure development, CI/CD, and software supply-chain controls. • Strengthen cloud and software security. • Lead detection, response, and recovery. Build a coordinated program across cloud, identity, development, employee systems, and agent activity. Define responsibilities for internal teams and providers, maintain escalation paths, and test containment, credential-revocation, and recovery procedures with system owners. • Lead detection, response, and recovery. • Build a fast, evidence-based vulnerability response. Maintain visibility into internet-facing services, including developer tools and management interfaces. Track relevant threats and active exploitation, determine whether we are exposed, and coordinate patching, isolation, credential revocation, or other mitigations. Prioritize based on evidence and business impact. • Build a fast, evidence-based vulnerability response. • Support enterprise trust. Coordinate audits, customer security reviews, vendor assessments, and technical evidence. Work with Legal and commercial teams so security commitments reflect actual controls and have clear owners. • Support enterprise trust. • Build the function. Select and manage security and IT tools and providers, automate recurring work, and help hire and develop the team as needs grow. Use AI to improve the team's work with appropriate data safeguards and validation. • Build the function.

Benefits

• Medical, Dental, Vision, Life and AD&D insurance - US folks get 100% coverage for Gold plans, 80% for dependents • Medical, Dental, Vision, Life and AD&D insurance • Ownership - Meaningful early-stage equity. Every full-time employee receives a stock option grant so you can share directly in Allium's upside • Ownership • Time off - Flexible, trust-based paid time off. We encourage people to take the rest they need. In every country we hire, our policies meet or exceed local statutory vacation requirements • Time off • Retirement - Company sponsored 401(k) plan in US so you can save pre-tax for the long term • Retirement • All applicants have to answer this pop quiz: "What is an Allium? What is your favorite Allium?". Bonus points for the right pronunciation.

Apply in one click

Upload My Resume

Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT

Apply in One Click
Apply in One Click

Similar roles

magicschoolmagicschool - Head of Trust & Safety2w ago
·Remote - USA·Equity
RemoteNADirectorCloud ComputingArtificial IntelligenceHead of SecurityhypothesisDiscordProcurementGCPTypeScriptPostgreSQLNext.jsVercelDatadogSupabaseSlackNotionLinearDocumentationSAFe
higgsfieldaihiggsfieldai - Head of Policy3w ago
·Remote - USA·Equity
RemoteNADirectorGovernmentHead of SecurityCross-functional Collaboration
DriveWealthDriveWealth - Head of Security GRC3mo ago
·Remote - USA·Equity
RemoteNADirectorFintechCybersecurityHead of SecurityAuditorReportingRisk ManagementGovernanceCircomDue Diligence
Anduril IndustriesAnduril Industries - Senior Global Supply Manager, Sensors and Optics2w ago
·Waltham, Massachusetts, United States·$161k - $161k/year + Equity
In OfficeNASeniorPaymentsLogisticsSenior Product ManagerLater
fluidstackfluidstack - Global Sourcing Manager, Networking & Hardware3mo ago
·Remote - Austin, TX, New York, NY, San Francisco, CA, U.S. Remote, Seattle, WA·$155k - $199k/year
RemoteNAMaterials EngineerPurchasing ManagerNetwork EngineerLater
AlliumAllium - Engineering Intern7mo ago
·New York, USA·Equity
In OfficeNAInternCryptocurrencyEngineering InternLater
Ethos LifeEthos Life - Deputy CISO1mo ago
·Remote - USA·$185k - $327k/year + Equity
RemoteNAC-levelFintechCybersecurityCISOHead of SecurityAWSDocumentation
PlaylabPlaylab - Head of Privacy & Security3mo ago
·United States·$200k - $250k/year + Equity
RemoteNADirectorCloud ComputingSoftwareHead of SecurityPrivacy ManagerAWSGDPR ComplianceKubernetesTerraformGoogle Workspace
beam-upbeam-up - Security Operations Lead1mo ago
·United Kingdom·£90k - £100k/year/year + Equity
In OfficeEMEAStaffCloud ComputingHead of SecurityDocumentationGCPKubernetesReportingAWS

Browse more by category

Show 19 moreHead of SecurityShow 113 moreLater
Privacy·Terms··Contact·FAQ·Wagey on X