Partner 20, Staff Engineer, Enterprise Security

a16z•San Francisco, CA

41d•$243,000 - $284,000•Hybrid

About The Position

Andreessen Horowitz (a16z) is hiring a Staff Engineer to own enterprise security across insider risk, data protection, SaaS security, and secure AI adoption. This program-ownership role is responsible for setting security strategy, selecting and implementing tools, developing policies with IT, and ensuring those policies become effective controls. The work protects sensitive deal and portfolio-company information, the firm, its limited partners, and its portfolio companies from risks including social engineering, data exfiltration, and targeted threat actors. The Staff Engineer will work closely with the Head of Cybersecurity, Security Engineering, IT, Legal, and Compliance. The role requires working in the San Francisco office two days per week, Tuesday and Thursday, with occasional days in the Menlo Park office. The position participates in the Security team's on-call rotation.

Requirements

At least 7 years of experience in security engineering or enterprise security roles.
Deep expertise in Identity and Access Management, authentication and authorization, DLP and insider risk tooling, SaaS security posture management, and endpoint management.
Track record of owning security programs such as DLP, insider risk, or SaaS security end to end, including setting strategy, selecting vendors, driving implementation across teams, and being accountable for outcomes.
Hands-on experience securing AI tools and agentic systems in an enterprise environment, including data flow controls, model and tool access governance, and AI vendor evaluation.
Experience with modern enterprise infrastructure and SaaS ecosystems, including Google Workspace, Okta, MDM solutions, SSPM, zero trust architecture, and cloud-native environments.
Experience running third-party and vendor security assessments at scale.
Ability to translate technical risk into language non-technical stakeholders can act on.
Low ego, high empathy, and ability to collaborate effectively with diverse teams.

Responsibilities

Own the firm's insider risk and data protection program end to end, including selecting and implementing a new DLP platform and developing AI-augmented DLP with LLM-based investigative tooling and automated analysis.
Drive secure AI adoption across the firm by securing AI tools and agents, defining guardrails for agentic systems acting on firm data, and establishing governance that supports safe adoption.
Own SaaS security posture across firm vendors, including a prioritized vendor inventory, SSPM, secure configuration baselines, and monitoring for risky changes.
Set authentication and authorization policy with IT, including Okta, device trust, MFA enforcement, and access reviews, and drive the policies through to enforcement.
Manage EDR across macOS, Windows, and iOS fleets, including deployment, coverage, and rulesets, and work with IT on MDM policies.
Own security for the joiner, mover, and leaver lifecycle, with particular focus on offboarding, access revocation, data holds, and exfiltration checks.
Run and improve the firm's vendor security due diligence process so new tools receive consistent, fast, risk-based reviews.
Monitor, investigate, and respond to data exfiltration and insider risk events in partnership with Incident Response and Legal.
Participate in the Security team's on-call rotation.