Head of Security

Tremendous • New York, NY

4d • $250,000 - $330,000 • Remote

About The Position

Tremendous is seeking its first Head of Security to build and own the company's security posture. The role involves enhancing existing security foundations such as bug bounty, pen tests, automated scanning, and phishing simulations. The Head of Security will focus on areas including access and identity, SecOps and monitoring, incident response, vendor security, employee security practices, and policy development. This is a player-coach position, requiring hands-on work initially, with the potential to build and lead a security team as the function matures. The role reports to the VP of Engineering, with security integrated into the engineering team for rapid implementation.

Requirements

• Real, hands-on security experience at a company that scaled, ideally as an early security hire through high growth.
• Deep experience in at least one core security domain (product/production security, security operations, or access/identity and policy) with broad knowledge across others.
• Defined the security posture, not just executed existing playbooks.
• An engineer's mindset with the ability to use code to solve problems.
• Ability to read the company's codebase and understand its infrastructure (Ruby on Rails; TypeScript + React; PostgreSQL; Google Cloud).
• Strong judgment over checklists, with the ability to explain actual risks and hold firm lines where necessary.
• Excellent communication and interpersonal skills ('bedside manner') to drive change collaboratively.
• Ability to hold one's own in debates, particularly regarding data access for AI tooling.

Nice To Haves

• Experience building or co-building a small security team.
• Fintech, payments, or regulated-industry experience.

Responsibilities

• Own Tremendous' security posture end-to-end, partnering with the engineering team on production infrastructure and code security.
• Assess security gaps, prioritize them, and implement solutions for the highest-leverage gaps.
• Treat incident response as a core function, ensuring breaches are small, contained, and managed effectively.
• Drive security as a cultural shift across the company through incremental controls and collaborative work.
• Lead the company's AI-security posture, managing risks and enabling AI tooling.
• Define the staffing needs and hiring plan for the security function, and build a team.

Benefits

• Competitive pay and equity.
• Base salary $250,000–$330,000.
• Meaningful equity.
• Fully remote work from anywhere in the Americas.
• Budget for AI tools ($5k/month per employee).
• High-documentation, low-meeting culture.
• Employee NPS in the high 80s.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed