1 month ago
USA (city not specified)Staff+
Base Salary
$185k - $270k/yr
Responsibilities
- Define and drive the security strategy and roadmap in alignment with business objectives and organizational risk.
- Design and mandate scalable security architectures across infrastructure, platform, and product systems.
- Define, implement, and govern the company-wide Secure Development Lifecycle, including automated threat modeling and continuous risk assessments.
- Establish secure development and governance practices for internal AI tools and customer-facing AI features.
- Lead AI threat and risk modeling addressing prompt injection, data poisoning, and sensitive data leakage.
- Develop automated remediation workflows, vulnerability management processes, and software composition analysis solutions.
- Mentor engineers, advise executive leadership, and promote a strong security culture.
- Direct critical security incident response and set strategy for threat modeling, penetration testing, and bug bounty programs.
Requirements
- Extensive experience owning, building, and scaling application security programs in SaaS or fast-paced startup environments.
- Deep software engineering expertise in languages such as Python, JavaScript/TypeScript, Rust, and C/C++, with architectural understanding of reliability, safety, and security.
- Practical experience securing internal AI infrastructure and customer-facing AI applications, with deep knowledge of AI and LLM security challenges.
- Ability to balance AI product innovation with security, compliance, and data privacy requirements.
- Demonstrated ability to build cross-functional consensus, influence engineering leadership, and execute large-scale performance, testing, and security initiatives.
- Strong business judgment and ability to balance user needs, product velocity, and enterprise security.
- Recognized computer security expertise, including complex security research and technical knowledge sharing.
- Ability to work autonomously, identify gaps, set direction, and execute with a distributed team.
- Eligibility to work in the U.S. for any employer.
- Preferred expert-level experience with Python, Django, Postgres, AWS, Terraform, CircleCI, GitLab, GitHub Actions, Semgrep, or LLVM.
- Preferred contributions to open-source security projects, standards, or industry working groups such as OpenSSF or Mozilla.
- Preferred experience improving collaboration between security and engineering teams or leading security at a high-growth startup.
Benefits
- Located in the EST or CST time zone is preferred.
- Occasional travel may be required.
- Jellyfish emphasizes diversity, inclusion, humility, performance, teamwork, and a collaborative company culture.
Tech Stack
Categories
About Jellyfish
Jellyfish is the leading intelligence platform for AI-Integrated engineering, helping more than 1,000 companies including DraftKings, Box and Blue Yonder, leverage AI to transform how they build software. By combining the industry's deepest engineering dataset with context-rich intelligence, Jellyfish helps R&D organizations understand what's driving impact, adopt proven industry best practices, and make smarter decisions across AI adoption, planning, delivery, and engineering performance. Learn more at jellyfish.co