Head of Security
Snorkel AI · San Francisco, CA (Hybrid)
About this role
**Head of Security — Snorkel AI** ## About Snorkel At Snorkel, we believe meaningful AI doesn’t start with the model—it starts with the data. We help enterprises transform expert knowledge into specialized AI at scale, combining technology with research-driven AI data development to create datasets, benchmarks, evals, and custom solutions. ## About the Role Snorkel is hiring a **Head of Security** to build and lead the security function end-to-end, covering: - **Infrastructure security** - **Application security** - **Governance, Risk & Compliance (GRC)** You’ll own the security function end-to-end—**strategy, team, and execution**—and act as the primary security voice with **customers, auditors, and the executive team**. You’ll report to the **CTO**. This is a **builder’s role**: take security from its current state to a mature, right-sized function as Snorkel scales, hiring and developing the team as needed. ## Key Responsibilities ### Security Leadership & Team Building - Define Snorkel’s overall security strategy, goals, and roadmap across infrastructure, application, and compliance domains - Build, hire, and lead a high-performing security organization (start lean and scale deliberately) - Establish security operating cadence (metrics, reporting, incident response, risk register) and represent security posture to exec leadership and the board ### Infrastructure & Cloud Security - Own cloud security architecture and posture across **AWS** (and other providers as adopted): IAM, network segmentation, encryption, landing zone design - Lead detection & response capabilities, threat modeling, and vulnerability management programs - Set standards for secure infrastructure-as-code, CI/CD, and secrets management ### Application Security - Embed security into the product development lifecycle: secure design reviews, threat modeling for new features, and AI/ML-specific risks (data protection, model/prompt security, training pipeline integrity) - Partner with Engineering and Product to build security into the SDLC without blocking velocity - Own application security tooling and practices (SAST/DAST/SCA, pen testing, bug bounty) - Design identity, access, and activity-monitoring controls for Snorkel’s **non-employee marketplace workforce** (external contractors such as 1099 experts), including correct provisioning/deprovisioning, access boundaries, and monitoring ### Governance, Risk & Compliance (GRC) - Build and run Snorkel’s compliance program (e.g., **SOC 2, ISO 27001**, and customer-driven frameworks); own audits end-to-end - Establish enterprise risk management practices: risk register, third-party/vendor risk, policy framework - Serve as the primary security point of contact for customer security reviews and questionnaires ### Executive & Cross-Functional Partnership - Advise the CTO and executive team on security risk and investment tradeoffs - Partner with Legal, Sales, Operations, and Engineering to unblock enterprise deals and support customer trust requirements - Communicate security posture, incidents, and roadmap clearly to both technical and non-technical audiences ## Who You Are ### Experience & Leadership - **10+ years** in technology security with significant leadership experience (director-level scope or above) - Proven track record building and scaling a security function from founding stage (~1) to mature org (10–30+), ideally at a high-growth technology company - Experience owning security budget, vendor selectio
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.