SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Obsidian Security, a leading SaaS security platform protecting 200+ global enterprises including Fortune 1000 companies, is seeking a Chief Information Security Officer to own the company's internal security program end-to-end while serving as a visible security leader to customers, partners, and the market.
Reporting to the Chief Legal and Trust Officer, the CISO will design and execute a global security strategy aligned with business growth, advising the board and executive leadership on critical cyber risk domains with actionable mitigation plans. Key responsibilities include building and leading security teams across product/application security, infrastructure protection, and security engineering; establishing cyber risk management programs with third-party vendor reviews; and overseeing threat detection, vulnerability management with SLA-based tracking, and incident response.
The role emphasizes embedding secure-by-design principles across engineering workflows, integrating security early in the SDLC with secure coding standards, penetration testing, bug bounty programs, and security requirements for AI/ML components including model integrity, training data protection, and prompt injection prevention. The CISO will establish enterprise AI governance frameworks, build detection and response capabilities for AI-powered attack vectors, and drive adoption of AI and automation across the security function.
Cross-functional partnerships are critical: collaborating with Engineering and Product on security throughout development and infrastructure decisions, supporting Sales and TAM teams in customer security reviews and questionnaires, and partnering with Marketing on security-focused content and thought leadership. The CISO will serve as the executive-level security contact for prospects and customers during sales cycles and audits, represent Obsidian in industry forums, recruit and mentor a high-performing security organization, own the security budget, and assess security posture and integration readiness for M&A targets.
The company, founded in 2017 and backed by top investors like Greylock, was built by leaders from CrowdStrike, Okta, Cylance, and Carbon Black. With AI driving rapid SaaS growth and complexity, Obsidian uniquely detects anomalous OAuth token activity and manages integration risks. The company is scaling rapidly with global momentum, a growing partner ecosystem including SentinelOne, Databricks, and Google Cloud, and a major fundraise ahead toward IPO readiness.
