The opportunity
Runpod is the AI Developer Cloud. More than one million developers, from indie researchers to teams running frontier models in production, use Runpod to experiment, train, fine-tune, deploy, and scale AI on one platform.
What you'll do
Own Security Strategy & Execution: Lead the security organization across multiple domains, including Cloud Security, Application Security, SecOps, and GRC (Governance, Risk, and Compliance). Ensure predictable, high-quality execution of security initiatives.
Implement Frameworks & Compliance: Partner with GTM and Legal to shape strategy and achieve/maintain critical compliance certifications (e.g., SOC 2, ISO 27001, HIPAA). Translate regulatory requirements into clear technical scopes and measurable outcomes.
Build a High-Output Org: Hire, mentor, and grow security managers and senior ICs. Create a culture of ownership, speed, and craft in a remote-first environment.
Drive Secure Product Development: Embed security into the engineering lifecycle. Run secure software development processes (SSDLC), threat modeling, architecture reviews, and automated vulnerability scanning without bottlenecking release velocity.
Threat Detection & Incident Response: Drive measurable improvements in platform resilience. Establish robust monitoring, logging, and alerting systems, and lead the incident response program to minimize MTTD (Mean Time to Detect) and MTTR (Mean Time to Respond).
Customer Trust & Vendor Risk: Ensure our security posture translates directly to business value. Act as an executive sponsor for critical customer security conversations and manage third-party vendor risk assessments.
What they're looking for
- Security Leadership Experience: 7+ years leading security teams including managers and/or multiple squads, with a proven record of securing high-scale cloud platforms or infrastructure products.
- Program Development Strength: Demonstrated ability to take complex security goals from concept through execution, balancing risk, scope, timelines, and business agility.
- Cloud Security Expertise: 8+ years building and securing SaaS, platforms, or IaaS products. Deep technical understanding of modern cloud-native architectures, Kubernetes, Linux OS security, networking, and virtualization.
- Remote-First Operating Excellence: Experience building culture, accountability, and momentum across distributed teams.
- Process & Metrics Mindset: Strong use of operational security metrics (MTTD, MTTR, patch SLAs, defect escape rates), and experience improving overall organizational security hygiene.
- Communication & Collaboration: Clear written and verbal communication, strong stakeholder management, and the ability to translate complex security risks into actionable business decisions.
- Background Check: Successful completion of a background check.
- Experience securing cloud infrastructure, developer platforms, distributed: compute, or bare-metal environments used by technical customers.
