JetBrains - Head of Security (JetBrains Cloud Platform)

• Platform security engineering and operational readiness • Build and run an actionable security program, taking responsibility for vulnerability management, security testing, incident response playbooks, on-call interfaces, and secure SDLC practices aligned with the platform’s release cadence. • Define and implement security controls for platform foundations, such as identity and organizational model, integrations, telemetry, billing surfaces, and administrative UX. • Lead readiness for enterprise security reviews, ensuring security documentation, security posture transparency, and customer-facing security assurance artifacts. • Success criteria: • Implementation of a repeatable security review process that scales with releases (not dependent on heroics). • Measurable reduction in critical security risks across the platform’s surface. • Customer trust, compliance enablement, and field partnership • Partner with Sales, Solutions, and Professional Services teams to unblock early design partners and enterprise rollouts with credible security answers and practical mitigations. • Drive a pragmatic compliance path (with enterprise-grade expectations) that includes security control mapping, audit support, and customer security questionnaires, at speed. • Act as a security-facing executive in customer conversations when needed. • Success criteria: • Security becoming an adoption enabler, with fewer blocked deals or PoCs due to security concerns, as well as faster security sign-offs. • Implementation of a clear enterprise-grade security baseline for the platform that supports scale. • Leadership and team building • Build and mentor a lean security team (platform security and product security), with strong relationships with infrastructure, identity, and agent runtime teams. • Implement decision frameworks that clarify what must be centralized vs delegated, when to block vs mitigate, and how to ship securely in an early-stage product environment. • Establish security KPIs that reflect real risk reduction and adoption readiness (not vanity metrics). • Success criteria: • A high-trust, high-velocity security organization that product and engineering teams want to partner with. • Security priorities that are clearly tied to platform milestones and customer adoption.