Security Lead

Sable • San Francisco, CA

2d

About The Position

Sable is hiring its first dedicated security owner to set and enforce security standards that enable enterprises to trust the company with customer data. The role owns security across browser environments, credentials, secrets, and customer and internal data, including data handling, access control, endpoint security, and the compliance program.

The Security Lead maintains ISO 27001, ISO 42001, and SOC 2 Type II controls and evidence; threat-models new product surfaces such as realtime voice, vision, browser use, and the Brain; and establishes preventative systems for engineering. The role also manages CVEs, contributes fixes in collaboration with engineering, and builds detection, logging, and incident response systems. The Security Lead works directly with customers' security teams and develops practical guardrails suited to a small, fast-moving team.

Requirements

• Experience in security engineering for cloud infrastructure, including Kubernetes, IAM, network isolation, and secrets management.
• Ability to implement security fixes directly, rather than only identifying findings.
• Ability to match controls to real risks while helping a small team move quickly.
• Comfort leading conversations with customers' security teams.

Nice To Haves

• Experience securing multi-tenant or sandboxed browser/computer-use systems.
• Experience running compliance audits.
• Experience with LLM agent risks such as prompt injection and data exfiltration.

Responsibilities

• Own security across browser environments, credentials, secrets, and customer and internal data.
• Own data-handling and access-control standards and implement enterprise-level best practices across all surfaces.
• Own the compliance program, maintaining ISO 27001 and ISO 42001 and SOC 2 Type II controls and evidence.
• Threat-model new product surfaces, including realtime voice, vision, browser use, and the Brain, and establish preventative systems for engineering before release.
• Manage and stay current on CVEs, resolving them through direct contributions and collaboration with engineering.
• Build detection, logging, and incident response systems.
• Lead conversations with customers' security teams.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed