11 months ago
London, United KingdomStaff+
Responsibilities
- Own and scale security tooling such as endpoint protection, MDM, access controls, vulnerability scanners, and ZTNA.
- Embed secure-by-design practices through secure coding, threat modeling, design reviews, and development-environment hardening.
- Monitor systems for irregular behavior and design detection and prevention mechanisms.
- Align infrastructure and applications with OWASP Top 10 and the AWS Well-Architected Framework.
- Lead internal risk assessments and third-party/vendor security reviews.
- Maintain security policies, procedures, controls, and audit-ready evidence for the ISO 27001-certified ISMS.
- Partner with go-to-market teams and leadership to communicate security posture and compliance maturity to customers and prospects.
- Automate repetitive security tasks using Python, PowerShell, Bash, or APIs.
Requirements
- Hands-on experience deploying and managing security tooling, including EDR, MDM, ZTNA, and vulnerability scanners.
- Experience with AWS security and enterprise security tools across vendors.
- Strong foundations in networking, systems, and cloud infrastructure.
- Experience reviewing and improving product and infrastructure security, including secure SDLC practices, threat modeling, secure code review, and development-environment hardening.
- Familiarity with ISO 27001 or SOC 2 and the ability to translate technical controls into documented policies and audit-ready evidence.
- A proactive, generalist mindset spanning infrastructure, product security, and compliance.
- Ability to own security initiatives end-to-end and operate autonomously in an ambiguous, fast-moving environment.
Benefits
- Competitive salary and significant equity.
- Substantial autonomy and ownership over core security systems.
- Budget for learning and professional growth.
- Bi-annual team retreats.
- Opportunity to work closely with experienced founders, AI scientists, and engineers.
- The posting does not state a work arrangement or contract duration.
About Pear VC
Pear VC is an early-stage venture capital partnership that invests at pre-seed and seed, pairing capital with hands-on support, mentorship, and programs like its PearX accelerator for founding teams. Founded in 2013 and headquartered in Menlo Park, California, it backs software and technology startups across categories. Its portfolio includes companies that reached the public markets, such as DoorDash and Guardant Health.