Ai Security Program Lead Jobs

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world's biggest financial problems. We're looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn't a place for complacency, it's where ambitious people do the best work of their careers. We're a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. Robinhood's Security Engineering org is a builder-first security engineering team — engineers organized across Cloud Security, Infrastructure Security, Security Platform, and Detection & Response. Unlike traditional security teams that identify risk and hand it off, this org builds the systems that solve it. We own the critical authentication and identity infrastructure that protects every Robinhood user, the cryptographic libraries and access provisioning systems that keep internal operations secure, and the telemetry and detection platforms that give our security operations team the signal they need to move fast. If it secures how Robinhood runs — we built it. AI is reshaping what this team does and how it operates across two dimensions. First, we are embedding security directly into Robinhood's growing AI and agentic infrastructure — building the runtime authentication, credential management, and validation systems that make it possible to run AI safely in production at scale. Second, we are using AI to fundamentally multiply the capability of the security program itself — building intelligent internal platforms that surface vulnerabilities, accelerate detection

At Linear, we're building the product development system for teams and agents. AI is fundamentally changing how software gets built, and we’re shaping the tools this new era requires. Founded in 2019, Linear has become the platform of choice for more than 30,000 companies (including OpenAI, Coinbase, and Ramp) to plan, build, and ship their products. Today, our team is distributed across North America, Europe, and Australia, and we’re continuing to grow internationally. What unites us is relentless focus, fast execution, and a deep care for software craftsmanship. At Linear, we are committed to quality. Security is an essential part of that quality — not a layer that we add later, but something we build in from the start. We have a foundational security program we're proud of but, as Linear evolves our product and scales into enterprise, there's meaningful work ahead: staying ahead of vulnerabilities as our attack surface grows, responding fast and cleanly when incidents happen, and hardening our product and infrastructure. As Security Engineer at Linear, you'll be operating in a high-autonomy role with real scope, doing hands-on security work across the product and infrastructure we build. Location & work mode Linear is a remote-first company. This role is open to candidates based in North America. You can work from anywhere within this region. We value deep focus and async collaboration, with intentional moments to connect in person through team off-sites, optional co-working, and occasional travel. What you’ll do Depending on your experience / skillset and our broader priorities, you could: Operate, automate, and extend vulnerability management end-to-end: triage, prioritize, and drive remediation across product, infrastructure, and dependencies, and keep the program’s SLAs meaningful rather than theoretical Run our bug bounty program: triage incoming reports, validate severity, work with engineering on fixes, and keep researcher relationships professional an

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team Security Business Enablement (SBE) is Stripe's commercial security function: the interface between Stripe's internal security program and its Go-to-Market organization. We make sure security and compliance requirements never block, delay, or devalue Stripe's deals. This work is about customer trust: businesses entrust Stripe with critical financial infrastructure, and their security teams need confidence that Stripe meets rigorous standards before, during, and after the sale. We make that trust tangible with accurate, consistent evidence of Stripe's security posture. We own security due diligence end to end: questionnaire response, compliance evidence, live security reviews, gap and exception management, contractual security exhibits, rapid response during industry-wide events, and executive briefings. We engage customers directly, up to CISO level, and equip sales teams to handle security conversations on their own. Our scope is unusually broad: one assessment can span security, privacy, business continuity, and resilience, translating deep control detail into language procurement, legal, and a CISO can each act on. We are often the first team asked to represent emerging parts of Stripe's posture. We work at the intersection of security, AI, and Go-to-Market. Our platform is built on authoritative grounding: answers are retrieved from a knowledge base we maintain and validate, not generated from first principles, so they are consistent and

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Director of Engineering for the Application, Cloud and Offensive security teams in the Security Engineering organization. Snowflake is the AI Data Cloud powering enterprises worldwide to store, process, and build intelligent applications on their most sensitive data. As AI has become more deeply embedded in what Snowflake and its customers do, the threat landscape has evolved at the same pace. This Director role was created directly in response to that convergence: a wide mandate with real influence across three security pillars and the visibility to shape how one of the most consequential technology platforms in the world stays ahead of emerging threats. AS A DIRECTOR OF ENGINEERING AT SNOWFLAKE, YOU WILL: Define and execute the security strategy across three core pillars: application security, cloud security assurance, and offensive security (including the red team program), setting direction and driving measurable outcomes across all three pillars. Build and develop a high-performing security engineering organization, hiring top talent and creating a culture of rigor, ownership, and continuous improvement Drive the offensive security program including red team operations, adversarial simulations, and proactive threat modeling to stay ahead of emerging att

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As Senior Product Manager of Document Management, you will be responsible for agent-led content management, guiding customers through agentic workflows to generate and maintain documents and procedures tailored to their business. Today, this process is slow, manual, and often stressful for companies. These artifacts are foundational to how a company’s security program operates—requiring customers to interpret multiple compliance requirements, establish processes, and define how those processes run, all while ensuring they will meet auditor expectations. At the same time, when customers decide to take on a new framework, they need to quickly assess their program (controls, policies, procedures, documents) against those new requirements to understand the gaps and assess the body of work to implement that new framework. This is a manual, tedious process that many companies end up outsourcing to consultants. As Senior Product Manager for Document Management, you will work cross functionally to build an agentic solution to automate these gap assessments, helping customers more quickly achieve their security and business objectives by scaling to new frameworks faster. By guiding and automating the creation, editing, and management of content end-to-end, you will help customers dramatically shorten the path to audit readiness and scaling their compliance program, while building confidence that their processes and documentation are aligned to their business needs. What you’ll do as a Senior Product Manager at Vanta: Own the agentic document, policies, and procedure creation and editing workflows, as well as agentic gap assessments Help

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. We’re looking for a motivated Account Manager to take ownership of the expansion and retention of Vanta’s APAC customers by developing and maintaining strong relationships with our customers. You will serve as the primary point of contact for all post-sale commercial conversations, including mid-cycle upsells and renewals. As a trusted advisor to the customer, you will deeply understand their business needs and align Vanta’s solutions with their objectives to help mature our customers’ compliance and security program. The goal of this team is to achieve overall net revenue expansion of the Vanta customer base, as measured by Net Revenue Retention with a particular focus on expansion. They will ensure customer’s security and compliance goals are aligned to their company growth needs and with Vanta’s solutions. This role is Sydney, Australia based and has a hybrid in office requirement. What you’ll do as an Account Manager - APAC at Vanta: Develop and maintain strong relationships with assigned accounts, acting as a trusted advisor and strategic partner. Develop a deep understanding of Vanta’s current product offerings and take initiative to learn Vanta’s product roadmap to speak confidently when addressing customers. Maintain strong partnerships and alignment with CSMs to understand customer health, ensure close strategic collaboration and execute harmonious communication to accounts. Collaborate on account plans that identify new opportunities for expansion with current customers to increase their usage of Vanta’s platform via new frameworks, security tools, etc. Manage the entire sales cycle of any expansion or renewal opportu

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Security-Compliance Program Manager to join our team. This is a Remote role, reporting to the Director, Global Security-Compliance Practice in the Global Security Compliance department. Compliance helps Zscaler win. When a Zscaler team member, a customer, or a partner hits a compliance requirement, our practice is who they call trust to answer. You'll be one of the people behind building trust: part advisor, part translator, part teacher. You'll help customers navigate compliance frameworks like Zero Trust, GDPR, NIST, PCI, and HIPAA, and you'll help our field teams turn compliance requirements into relevant, relevant, and winning conversations. In every room you walk into, you'll live at the intersection of security, data protection, and compliance, making the case for how Zscaler protects customers and their data in a compliant way. This is not a back-office audit job. You'll be in front of custo

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations Austin, US About the Role Security at Cloudflare is a diverse, focused team committed to helping secure both Cloudflare and our customers. The Security Technical Program Management team sits at the cross-section of engineering, security, and business. We define, align, and drive the strategic security programs that reduce risk and advance innovation across Cloudflare, while partnering to build the best solutions for our custome

Ready to Get Shit Done? At bunq, we're building a bank that lives in the cloud, handles billions of transactions, and now integrates AI into our operations—all while keeping our user's data and trust intact. To operate at this scale and speed without compromising security, we need an Internal Auditor focused on Data Security & AI to audit our security controls, validate our AI governance, and ensure every system we build is resilient and trustworthy. As an Internal Auditor – Data Security & AI, your mission is to strengthen bunq's security and AI governance posture by auditing data protection controls, assessing AI model risks, identifying vulnerabilities before attackers do, and ensuring our security practices evolve as fast as our technology. Take Ownership As an Internal Auditor - Data Security & AI, you'll own: Audit security controls across infrastructure, applications, and operations, assessing access controls, encryption, monitoring, incident response, and third-party security effectiveness. Build an AI governance audit program that evaluates model development, bias testing, monitoring, transparency, and regulatory alignment (AI Act, NIS2). Identify and prioritize security and AI risks, conducting vulnerability assessments, pen test reviews, and model audits to surface gaps before they're exploitable. What You'll Work on Right Away Security Control Assessment: Audit bunq's critical security infrastructure (cloud environment, API security, data encryption, access management) and validate the effectiveness of controls; deliver a risk-prioritized remediation roadmap. AI Model Governance Program: Design and execute bunq's first AI audit program, evaluating model development practices, data quality controls, bias testing, monitoring, and transparency, identifying governance gaps and building a scalable AI audit framework. Data Protection & Privacy Audit: Conduct a comprehensive audit of bunq's data handling practices across all systems, assessing compliance with G

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations: Austin,TX; Washington, D.C. About the Department Security at Cloudflare is a diverse, focused team committed to helping secure both Cloudflare and our customers. The Security Technical Program Management team sits at the intersection of engineering, security, and business. We define, align, and drive the strategic security programs that reduce risk and advance innovation across Cloudflare, while partnering to build the best so

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking an experienced Governance, Risk, and Compliance (GRC) Engineer focused on European Union and United Kingdom information security and financial services regulation to help scale compliance for SpaceXSI and xMoney. As we expand deeper into regulated EU/UK markets, maintaining a robust, transparent, and technically sound information security GRC program is critical. You will architect the systems and processes that automate trust — a pragmatic operator who understands that GRC exists to enable the business, balancing rigorous standards with the velocity of a high-growth company. The ideal candidate brings hands-on experience with frameworks such as DORA, the EU AI Act, NIS2, and related EU/UK information security and operational resilience obligations, plus GRC engineering skills: Compliance-as-Code, continuous evidence collection, and deep partnership with engineering so controls are designed into the platform rather than bolted on after the fact. This role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities. This position may require occasional travel. RESPONSIBILITIES: Own and evolve

About Sentry Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. About The Role The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. As a Security Engineer on this team, you'll work across application and platform security domains. You'll contribute to the practices that keep Sentry secure as we grow: security reviews, threat modeling, vulnerability management, and embedding secure coding practices into an engineering organization that cares about doing things right. You'll partner closely with product and engineering teams to influence how features are designed and built from the start. You will work as a technical collaborator who helps make the secure path the obvious one. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security challenges. In this role, you will Support and help mature Sentry's security review program. From secure code review, to architecture review, and threat modeling. You'll help build the processes, tooling, and culture which make security a natural part of how we ship and operate. Contribute to mature vulnerability management practices. Intake, triage, prioritization, remediation tracking, and support of our bug bounty and responsible disclosure program. Advocate for secure-by-desig

About Sentry Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. About The Role The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. As a Security Engineer on this team, you'll work across application and platform security domains. You'll contribute to the practices that keep Sentry secure as we grow: security reviews, threat modeling, vulnerability management, and embedding secure coding practices into an engineering organization that cares about doing things right. You'll partner closely with product and engineering teams to influence how features are designed and built from the start. You will work as a technical collaborator who helps make the secure path the obvious one. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security challenges. In this role, you will Support and help mature Sentry's security review program. From secure code review, to architecture review, and threat modeling. You'll help build the processes, tooling, and culture which make security a natural part of how we ship and operate. Contribute to mature vulnerability management practices. Intake, triage, prioritization, remediation tracking, and support of our bug bounty and responsible disclosure program. Advocate for secure-by-desig

Comcast Cybersecurity: Principal Program Manager, Cyber Security – Frontier AI Models — PA - Philadelphia, 1701 John F Kennedy Blvd. Apply via Workday.

About Eudia: Eudia is redefining the future of legal work with AI-powered Augmented Intelligence, enabling Fortune 500 legal teams to move faster, manage risk more effectively, and unlock new business value. Backed by $105M in Series A funding led by General Catalyst, we’re building a category-defining platform that blends AI-driven automation with human expertise, transforming legal from a cost center into a strategic growth driver. At Eudia, we move fast. Unlike traditional enterprise software, our teams ship solutions in days, not months—delivering real impact for some of the world’s largest companies, including Cargill, Coherent, DHL, and Duracell. We’re solving one of the most complex, unsolved challenges in AI: bringing trust, accuracy, and security to legal automation. We’re a team of builders, operators, and problem-solvers who are passionate about reshaping an industry that has long been resistant to change. If you’re looking for a place where you’ll be challenged, take ownership from day one, and work alongside some of the brightest minds in AI and legal —we’d love to meet you. The Role We are hiring a Security GRC Engineer to build and scale the technical backbone of our security and compliance program. This is not a traditional compliance seat. You will take a control requirement, trace it into the system that implements it, work with Engineering to get it right, and automate the evidence that proves it works. You will operate across SOC 2, ISO 27001, HIPAA, and AI governance, and you will partner with our ISSM on public-sector and FedRAMP-related work rather than owning it. You will own real systems and processes, not just documents, and you will have real room to decide how the program gets built. We are small and lean, so we value a bias to action. A working control that ships beats a perfect policy that does not. What You’ll Do Translate requirements from SOC 2, ISO 27001, HIPAA, and customer security assessments into