Member of Technical Staff, Head of Security
- Salary
- $300,000 - $375,000
- Level
- Staff
- Work type
- On-site · New York
Not stated in the posting: visa.
Open. First seen 2 October 2026.
About the role
Profound's standard text
Profound is the fastest-growing AI marketing platform, used by 15% of the Fortune 500 including Comcast, Estée Lauder, and Walmart, and innovators like Ramp, MongoDB, and Figma. It is where marketing teams do the work: research, briefs, content, campaigns, reporting, all in one place, alongside agents that carry the load with them.
Built on 2B+ real user prompts and growing, Profound’s data shows you what people ask AI and what the models say back. Profound's AI Marketer joins that data with deep context about our customers to find the opportunities worth acting on, and then puts agents to work: automating reporting, drafting content, auditing pages for readability, running competitive research. It measures what works and gets better every day.
About the Role
As our Head of Security you will build and lead the company's security program as it scales into a trusted enterprise platform. This is a foundational, high-impact role: you'll own security strategy end-to-end while staying hands-on, working alongside an existing Security Engineer to mature Profound's program from "does the right things" to "provably does the right things at enterprise scale."
You'll also own IT for the company, making this a role that spans technical security leadership and the practical, day-to-day systems that keep the company running securely.
This is a player-coach role. You should be comfortable setting strategy and talking to enterprise customers' security teams one day, and rolling up your sleeves on a threat model, an incident, or an endpoint policy the next.
What You'll Do
Security Strategy & Leadership
- Own and evolve Profound's overall security strategy, roadmap, and risk posture as the company scales
- Own the build-out and growth of the entire security function and team.
- Serve as the executive-level owner of security in customer conversations, RFPs, and security reviews with enterprise and Fortune 100 prospects and customers
- Partner closely with Engineering, Product, and Leadership to embed security into the SDLC and product roadmap
Governance, Risk & Compliance
- Own and mature Profound's compliance posture (SOC 2 Type II and beyond — e.g. ISO 27001, GDPR, and other frameworks as enterprise customers require)
- Drive audits, policy development, vendor risk management, and control operations
- Manage relationships with auditors, pen testers, and security vendors
Technical Security
- Provide technical direction and oversight for application security, cloud security (AWS/GCP), and infrastructure hardening
- Own incident response: build the program, run tabletop exercises, and lead the response when needed
- Guide and review the Security Engineer's work on detection, vulnerability management, and secure architecture
- Evaluate and implement security tooling (SIEM, EDR, vulnerability scanning, etc.)
IT
- Own IT operations for the company: identity and access management (SSO/MDM), endpoint security, employee onboarding/offboarding, SaaS security posture, and internal tooling
- Set and enforce IT policies that scale with headcount growth without creating unnecessary friction
What We're Looking For
- 8+ years in security, with progressively increasing scope, including experience owning a security program (not just executing within one)
- Prior experience as a first or early security hire at a high-growth startup, ideally SaaS/B2B, strongly preferred
- Hands-on technical depth — this is not a purely strategic/managerial role. Comfortable engaging directly on application security, cloud security, and incident response
- Direct experience owning SOC 2 (Type II) and driving compliance programs; experience with additional frameworks (ISO 27001, GDPR, etc.) a plus
- Experience leading and developing a small team
- Comfortable being the face of security to enterprise customers, including technical security reviews and questionnaires
- Experience owning or partnering closely with IT function preferred
- Excellent communicator who can translate technical risk into business terms for executives and customers alike
Why This Role
- Build a security program from the ground up at a company at the center of the shift to AI-driven search
- High visibility — this role sits close to leadership and directly influences enterprise sales and customer trust
- A strong Security Engineer already on the team, with a clear mandate to grow the function further
- Fast-growing, well-funded company (Series C, $1B valuation) with strong momentum
Location
This is an on-site role based in our Union Square, NYC office, designed for builders who thrive on speed, iteration, and meaningful impact.
For this role, the expected base salary range is $300,000 to $375,000. Profound’s total compensation package is designed to be competitive and includes base salary, equity, and a full range of benefits and perks. Final compensation will depend on factors such as your skills, experience, qualifications, and location, and will be determined during the interview process. Our recruiting team will share more details about the full compensation package and benefits as you move through hiring.
Profound's standard text
Note: All official communication from Profound will come from a @tryprofound.com email address. If you're contacted by anyone using a different domain, please disregard and report it as spam.
#LI-PRO
Note: All official communication from Profound will come from a @tryprofound.com email address. If you're contacted by anyone using a different domain, please disregard and report it as spam.
What this role asks for
Particular to this role
GCP · IAM · SIEM
Rare in Profound's other 33 open postings.
Standard for security roles
AWS
Common in security postings at any company.
In most of Profound's ads
Figma · MongoDB
Named in most of its open postings, whatever the role.
78% of this description is written for the role. The rest is Profound's standard text, folded away below.
Read against Profound's other open postings on this site.
The team: Engineering HIRES STEADILY
This role is one of 10 open in Engineering. 1 was posted in the last 30 days and the oldest in July: a team that hires all year rather than one being built.
WHAT THE TEAM WORKS WITH, ACROSS ITS POSTINGS
Figma (10 of 10), MongoDB (10 of 10), Rust (6 of 10), AWS (5 of 10), Python (5 of 10), JavaScript (4 of 10), PostgreSQL (4 of 10)
OTHER ROLES ON THIS TEAM
- Member of Technical Staff, iOS Engineer posted Sep 21
- Member of Technical Staff, GRC Director posted Sep 11
- Member of Technical Staff, TLM, Context Engineering posted Jul 28
- Member of Technical Staff, Rust Agent Runtime posted Apr 30
- Member of Technical Staff, Backend posted Feb 9
- Member of Technical Staff, Infrastructure posted Oct 28
- Member of Technical Staff, Forward Deployed posted Oct 28
- Member of Technical Staff, Frontend posted Jul 24
- Member of Technical Staff, Fullstack posted Jul 24
From the team and dates on Profound's own job board.
Similar jobs
- Senior Enterprise Security Engineer at SoundCloud
Shares 4 skills: SIEM, IAM, GCP… · same city - Security Architect / Security Engineer at Zscaler
Shares 4 skills: SIEM, IAM, GCP… · same country - Enterprise Cyber Security Architect at AEG Worldwide
Shares 4 skills: SIEM, IAM, GCP… · same country - Cyber Security Threat Management Senior Associate at DTCC
Shares 4 skills: SIEM, IAM, GCP… · same country - Replay - Security Lead at decircletalentpartner
Shares 3 skills: SIEM, IAM, AWS · same city - Head of Design at Profound
Also at this company
Is this your posting and you want it taken down? Email info@careerholo.com.