Security Lead

Sable • San Francisco, CA

4d

About The Position

Sable is hiring its first dedicated security owner to establish and enforce the security standards needed for enterprises to trust the company with customer data. The role owns security across Sable’s browser environments, credentials, secrets, customer and internal data, and is responsible for data handling, access control, endpoint security, and the compliance program.

The Security Lead will maintain ISO 27001 and ISO 42001 and SOC 2 Type II controls and evidence; threat-model new product surfaces, including realtime voice, vision, browser use, and the Brain; and establish preventative systems for engineering. The role also manages and resolves CVEs, builds detection, logging, and incident-response systems, and works directly with engineering and customers’ security teams. The position is intended for someone who can implement fixes directly and match controls to risk while enabling a small team to move quickly.

Requirements

• Experience in security engineering for cloud infrastructure.
• Experience with Kubernetes or other container orchestration, IAM, network isolation, and secrets management.
• Ability and willingness to implement security fixes directly, not only identify findings.
• Ability to match security controls to actual risk while enabling a small team to move quickly.
• Comfort leading conversations with customers’ security teams.

Nice To Haves

• Experience securing multi-tenant or sandboxed browser/computer-use systems.
• Experience running compliance audits.
• Experience with LLM agent risks such as prompt injection and data exfiltration.

Responsibilities

• Own security across browser environments, credentials, secrets, and customer and internal data.
• Own data-handling and access-control standards and implement enterprise-level best practices across all surfaces.
• Own the compliance program, maintaining ISO 27001 and ISO 42001 and SOC 2 Type II controls and evidence.
• Threat-model new surfaces, including realtime voice, vision, browser use, and the Brain, and establish preventative systems for engineering before launch.
• Manage and stay current on CVEs, resolving them through personal contributions and collaboration with engineering.
• Build detection, logging, and incident-response systems.
• Lead conversations with customers’ security teams.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed