Head of Security

About the role

Tremendous is looking for its first Head of Security to own and evolve the company’s security posture. You will work closely with engineering to embed security into production infrastructure and code, while driving a cultural shift toward proactive security across the organization.

Key responsibilities

• Define and execute a comprehensive security strategy covering access, identity, SecOps, monitoring, incident response, vendor risk, and employee practices.
• Assess current security gaps, prioritize remediation, and lead hands‑on implementation of high‑leverage controls.
• Lead incident response efforts to contain breaches quickly and ensure clear post‑mortem processes.
• Shape the AI‑security posture, balancing risk management with the company’s AI tooling investments.
• Build and scale a security team as the function matures, defining roles and hiring needs.

Required profile

• Proven, hands‑on security experience at a fast‑growing company, ideally as an early security hire.
• Deep expertise in at least one core domain (product/production security, SecOps, or access/identity) with the ability to reason across others.
• Track record of defining security posture rather than merely following existing playbooks.
• Engineer’s mindset with comfort reading and influencing codebases.

Required skills

• Penetration testing
• Security operations (SecOps) and monitoring
• Incident response planning and execution
• Access and identity management
• Vendor security assessment
• AI security risk management
• Automated code and configuration scanning

What we offer

• Fully remote work environment
• High‑documentation, low‑meeting culture
• Opportunity to shape security from the ground up
• Competitive compensation and equity in a profitable, investor‑free company