Leads enterprise cybersecurity strategy, architecture, risk management, compliance, incident response, vulnerability management, IAM, cloud and application security, and DevSecOps implementation. The role coordinates audits and penetration testing, embeds security into CI/CD pipelines, guides secure cloud architecture, and mentors security engineers and analysts while partnering with engineering, DevOps, product, compliance, and executive teams.
This is a remote position.
The Security Lead is responsible for defining and executing the organization’s cybersecurity strategy, leading security architecture, managing risk, and ensuring compliance with global security standards. This role works closely with engineering, DevOps, product, compliance, and leadership teams to embed security into all layers of the technology stack.
Key Responsibilities
- Define and lead enterprise-wide cybersecurity strategy and architecture.
- Oversee application, infrastructure, and cloud security across all systems.
- Lead threat modeling, risk assessments, and vulnerability management programs.
- Establish and enforce security policies, standards, and best practices.
- Monitor, detect, and respond to security incidents and breaches.
- Ensure secure software development practices (DevSecOps) are implemented.
- Conduct security audits, penetration testing coordination, and remediation tracking.
- Collaborate with Engineering and DevOps teams to embed security in CI/CD pipelines.
- Ensure compliance with regulatory and industry standards (e.g., ISO 27001, PCI-DSS, GDPR).
- Lead identity and access management (IAM) strategies and controls.
- Provide security guidance for cloud infrastructure and architecture decisions.
- Mentor and develop security engineers and analysts.
Required Qualifications
- 8–15 years of experience in cybersecurity or information security roles.
- Proven experience leading security teams in enterprise or fintech environments.
- Strong knowledge of cloud security, application security, and infrastructure security.
- Experience with incident response, threat detection, and risk management.
- Strong understanding of regulatory compliance frameworks.
- Excellent leadership, communication, and stakeholder management skills.
Technical & Functional Expertise
- Cybersecurity architecture and design
- Cloud security (AWS, Azure, or GCP)
- Identity & Access Management (IAM)
- Vulnerability management and penetration testing coordination
- Secure Software Development Lifecycle (SSDLC / DevSecOps)
- Network security and encryption protocols
- Security monitoring and SIEM tools
- Incident response and disaster recovery planning
- Compliance frameworks (ISO 27001, NIST, PCI-DSS, GDPR)
- Risk assessment and threat modeling
Similar Jobs
Financial Services
Leads cybersecurity architecture and product security initiatives across applications and platforms. Evaluates controls, technologies, and AI-assisted security recommendations; guides risk analysis, threat modeling, remediation, and security posture assessments. Partners with architects, developers, vendors, and business leaders to define scalable security patterns, validate solutions, and improve software development lifecycle controls, resiliency, auditability, and traceability.
Top Skills:
Artificial IntelligenceMachine LearningMobilePublic CloudSoftware Development LifecycleThreat Modeling
HR Tech
Leads information security threat research, compliance assessments, risk and vulnerability assessments, and security control implementation. Aligns NIST requirements with business processes, documents risks and security procedures, supports security issues, promotes security awareness, and manages project plans through completion.
Top Skills:
CobitFirewallsHipaa SecurityNetwork ProtocolsNetwork RoutersNetwork SwitchesNist 800-53Nist Csf
Social Media
Lead Buffer’s security strategy and execution as a hands-on security engineer. Responsibilities include application and API security, secure development practices, AI threat modeling, incident leadership, vulnerability disclosure, SOC 2 and customer compliance, security automation, and infrastructure risk assessment. The role partners closely with engineering and business teams, writes and reviews code, supports on-call operations, and establishes security standards in a distributed SaaS environment.
Top Skills:
1PasswordAction1AndroidArgocdAWSAws GuarddutyClaude TeamCloudflareCloudflare WafCloudflare WorkersCloudflare Zero TrustCloudfrontDatadogDependabotDnsEksGithub ActionsGitleaksGoogle WorkspaceGraphQLIamIncident.IoiOSKubernetesMcpMongoDBNode.jsOauthOidcPagerdutyPHPPythonRest ApiS3SentrySqsTerraformTypescriptVanta
What you need to know about the Austin Tech Scene
Austin has a diverse and thriving tech ecosystem thanks to home-grown companies like Dell and major campuses for IBM, AMD and Apple. The state’s flagship university, the University of Texas at Austin, is known for its engineering school, and the city is known for its annual South by Southwest tech and media conference. Austin’s tech scene spans many verticals, but it’s particularly known for hardware, including semiconductors, as well as AI, biotechnology and cloud computing. And its food and music scene, low taxes and favorable climate has made the city a destination for tech workers from across the country.
Key Facts About Austin Tech
- Number of Tech Workers: 180,500; 13.7% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Dell, IBM, AMD, Apple, Alphabet
- Key Industries: Artificial intelligence, hardware, cloud computing, software, healthtech
- Funding Landscape: $4.5 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Live Oak Ventures, Austin Ventures, Hinge Capital, Gigafund, KdT Ventures, Next Coast Ventures, Silverton Partners
- Research Centers and Universities: University of Texas, Southwestern University, Texas State University, Center for Complex Quantum Systems, Oden Institute for Computational Engineering and Sciences, Texas Advanced Computing Center
