Head of Security

Lightfield•San Francisco, CA

3d•$250,000 - $325,000

About The Position

Lightfield is seeking an experienced, deeply technical security leader to build and lead its security function. Lightfield’s product connects to sensitive company systems and data—including email, calendars, meetings, Slack, and CRM data—and uses that context to power AI agents. The Head of Security will own the protection of this data and help establish systems customers can trust. The role spans product and infrastructure security, AI and agent security, identity and access, incident response, compliance, and customer security. It combines setting security strategy with hands-on execution, including architecture and code reviews, threat modeling, vulnerability and incident investigation, implementing controls, and infrastructure improvements. The person will build the security team as the company grows and will report to the CTO, with significant ownership and visibility across the company.

Requirements

Previously led the security function at a high-growth technology company, with end-to-end responsibility for security.
Built a security program through a meaningful stage of company growth and understands how the function should evolve as a company scales.
Deeply technical security expertise, with the ability to work in code and infrastructure, set strategy, and engage with executives and customers.
Strong application and cloud security expertise, including the ability to reason about attack surfaces, trust boundaries, and failure modes.
Owned security and compliance programs such as SOC 2 and worked directly with enterprise customers and their security teams.
Strong judgment in distinguishing material risks from theoretical risks and improving security without unnecessarily slowing the company down.
Ability to build a security organization, including deciding what to own centrally, what to embed in engineering, when to use vendors, and when and whom to hire.

Nice To Haves

Interest in developing security models for AI agents and other emerging systems where established patterns are still evolving.

Responsibilities

Own Lightfield’s security strategy and roadmap, identify the most important risks, and drive them to resolution.
Partner with engineers on product and infrastructure security through architecture reviews, threat modeling, code review, vulnerability remediation, and security-control implementation.
Define and evolve the security model for AI agents, including permissions, tool access, sandboxing, data boundaries, and safe execution.
Build and operate security-program systems, including identity and access, vulnerability management, detection and monitoring, incident response, and data protection.
Lead security incident response and investigate systems, logs, and code to understand and resolve incidents.
Own the security and compliance program, including SOC 2 and requirements associated with expanding into the enterprise.
Work with customers and prospects on security reviews, architecture discussions, and complex security requirements.
Build security into company operations through architecture, tooling, and collaboration rather than unnecessary process.
Build and lead the security team as the company’s needs grow.