Head of Security

Job not on LinkedIn

🔥 55 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Tonic.ai

WebsiteLinkedInAll Job Openings

51 - 200 employees

🏥 Healthcare

📦 Logistics

💼 Consulting

💰 $35M Series B on 2021-09

Healthcare • Logistics • Consulting

Tonic. ai is a company that provides software solutions for data security and test data management. They specialize in generating realistic synthetic data to safely test and develop applications without using sensitive real data. Their products focus on data de-identification, data masking, and synthesis, making it easier for engineers to create development environments that mirror production conditions. Tonic. ai also integrates with various relational and NoSQL databases, supporting AI development by transforming unstructured data into safe, usable formats. They cater to industries like healthcare and financial services with compliance needs such as HIPAA and GDPR.

📋 Description

• Own Tonic's SOC 2 program end to end, including scoping, evidence collection, control remediation, and auditor relationship • Maintain alignment with GDPR, HIPAA, and customer-contract security commitments • Partner with engineering to integrate security into the development lifecycle from design review through release • Run vulnerability management across code, dependencies, and infrastructure, including penetration testing and remediation tracking • Secure and govern AWS, GCP, and Azure environments, including IAM, configuration, logging, and hardening • Serve as the customer-facing security expert and own security questionnaires and RFP responses • Join sales calls involving detailed customer security discussions • Work with legal on contract negotiations and security redlines • Run corporate security and IT, including endpoint management, laptop hardening, EDR monitoring, and incident response • Own identity and access management and vendor risk management • Establish and maintain employee AI-use policies and guardrails covering LLM platforms, coding assistants, MCP connectors, access controls, data handling, and AI-provider review • Keep AI policies current as the security landscape evolves • Learn products, infrastructure, and controls; take over the security questionnaire queue; and assess major risks during the first month • Own the SOC 2 program and auditor relationship, create a prioritized security roadmap, and implement effective AI-use policies during the first quarter • Help determine how Tonic's security function should grow and when to hire additional staff

🎯 Requirements

• Several years leading security at a B2B software company, with a record of building programs rather than inheriting them • SOC 2 audits owned end to end, plus working knowledge of GDPR and HIPAA • Hands-on experience securing AWS, GCP, and Azure • Ability to read IAM policies, identify misconfigurations, and remediate them with engineers • Experience embedding security in the development lifecycle • Experience running vulnerability management • Customer-facing experience, including security questionnaires, CISO calls, and legal redlines • Experience running corporate security and IT, including endpoint management, EDR, incident response, IAM, and vendor risk • Experience using AI tools and creating practical AI security guardrails • Ability to make independent, risk-based decisions • Clear communication with engineers and executives • Experience at a data infrastructure, privacy, or AI company is a plus • Experience selling into regulated industries is a plus • Experience with ISO 27001, HITRUST, or FedRAMP is a plus • Experience securing customer-deployed software alongside SaaS is a plus • Experience at an early-stage or fast-growing company is a plus

🏖️ Benefits

• Competitive salary and equity • Unlimited paid time off • 401k plan with employer contribution • Medical, dental, and vision insurance • Generous parental leave policy • Remote-friendly work environment

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume