Corporate Security & IT Lead

Code Red is partnered with a top VC firm in SF to find their first dedicated security engineering hire.

The Opportunity

This is a true greenfield mandate: a well-established, respected firm that has never had a formal security function. You'll report directly to the CISO as the #2, building security from the ground up across a ~200-person global organization.

Responsibilities

• Build and own security across SecOps, detection & response, identity, cloud security, data security, and corporate security as a hands‑on IC lead
• Design and automate IAM workflows (joiner‑mover‑leaver lifecycle, provisioning/deprovisioning, least‑privilege access models)
• Stand up detection and monitoring capability where none currently exists — SIEM/SOAR strategy, alert prioritization, and cost‑aware log ingestion decisions
• Manage privileged access and secrets across cloud and on‑prem environments, including human and non‑human/service identities
• Centralize security strategy across three global regions, partnering with regional IT leads
• Nice to have: comfort with hybrid cloud/on‑prem infrastructure

Qualifications

• 5–7 years of experience, ideally with 01 foundational security work — you've built a security function as a team of one or near‑one
• Background spanning security engineering, SecOps, detection & response engineering, identity/IAM — someone who's implemented controls end to end, not just touched tools
• Experience with modern EDR/XDR tooling (CrowdStrike or similar), Okta/IAM platforms, and Mac‑heavy environments (Jamf)
• Comfortable operating as a hands‑on generalist across multiple security pillars, not siloed to one