[Hiring] Head of Security & Infrastructure @Rise Works

Role Description

Working directly with the CTO, you'll own security across Rise's cloud, edge, and on-chain surfaces, and the infrastructure operations that keep production healthy. You are the first dedicated security role at Rise, but you are not starting from zero: you inherit a working program - SOC 2 certification, Google SecOps, Terraform-managed GCP, Cloudflare at the edge, and established on-chain treasury controls - and your job is to own it, harden it, and take it further. Security is the center of gravity for the role, with infrastructure and reliability close behind, on a mostly serverless stack designed to keep operational overhead low.

This is a hands-on leadership role. You will not manage people, but you are the security leader for the company: you set security direction, make the calls on risk, represent Rise to auditors, partners, and customers, and are the person engineering and leadership turn to when a security or infrastructure question needs an answer. It is a builder's seat, not an advisory one - you'll harden what exists, design what's missing, and ship it yourself.

What You'll Do

• Own and run Rise's security operations: detection engineering, alert triage, investigation, and response across GCP, Cloudflare, GitHub, and Google Workspace.
• Build and tune detections in Google SecOps (Chronicle) over Cloud Audit Logs, load-balancer and Cloud Run request logs, Cloudflare firewall logs, and application telemetry.
• Establish and track behavioral baselines so new or escalated activity stands out from normal operations.
• Own incident response: detection, containment, forensics, remediation, and blameless post-mortems.
• Run tabletop exercises and game days.
• Build AI-driven security automation.
• Own Rise's security posture across cloud, edge, data, and on-chain surfaces.
• Design and enforce a zero trust access model.
• Own secrets management and access governance.
• Harden the GCP footprint and Cloudflare edge configuration.
• Protect sensitive customer, payroll, and identity data.
• Own the security of Rise's Ethereum and EVM treasury layer.
• Secure the relayer and off-chain services that submit transactions.
• Own Rise's compliance program: maintain SOC 2 certification and lead the path to ISO 27001 and PCI DSS.
• Run security awareness and secure-development enablement for the engineering team.
• Own data privacy risk.
• Own the infrastructure operations behind code releases.
• Provide day-to-day operational support for production infrastructure.
• Build and maintain CI/CD and Terraform-managed infrastructure on GCP.
• Improve observability.
• Be accountable for reliability.
• Operate and continuously improve disaster recovery capability.
• Keep the infrastructure upgraded over time.

Qualifications

• 10+ years in security engineering and infrastructure.
• Substantial, hands-on GCP experience.
• Experience in security operations and incident response.
• Experience managing cloud infrastructure as code in Terraform.
• Experience designing and implementing zero trust access.
• Familiarity with security fundamentals.
• Comfort reading and reasoning about code in a Node.js / TypeScript and MySQL environment.
• Hands-on experience owning deployment pipelines.
• Willingness to carry production operations and on-call.
• Experience using AI tools for work.
• Experience with compliance certifications.

Requirements

• Applicants must be legally authorized to work in the United States on a full-time basis and reside in the U.S.
• Must pass a comprehensive 7-to-10 year background check.

Benefits

• Base salary: $230,000-$275,000, commensurate with experience.
• Meaningful equity in a growing company.
• Generous healthcare benefits - medical, dental, and vision coverage for you and your family.
• Unlimited PTO and a flexible work schedule.
• 401(k) with a 3% company grant.
• Fully remote within the United States.