SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Ent is an intent-aware workspace security platform that protects human and AI-driven work by understanding user and agent intent to intervene at the moment of risk. Founded by Lou Manousos and Brandon Dixon (co-founders of RiskIQ, acquired by Microsoft) and the team behind Microsoft Security Copilot, Ent is in production with Global 2000 customers across hospitality, financial services, and defense, backed by Decibel, Sequoia, Crosspoint Capital, Craft Ventures, Shield Capital, Felicis, and In-Q-Tel.
You will serve as a hands-on Chief Information Security Officer, building and leading Ent's internal security program as the company scales. This is both an internal security leadership role and a customer-facing responsibility. You will own the security of people, systems, infrastructure, product development environments, and company data, working closely with founders and leaders across Engineering, Product, Legal, People Operations, IT, and Go-to-Market.
Key responsibilities include: setting company-wide security strategy and roadmap with measurable outcomes; personally driving critical assessments, control design, remediation, and incident work while building a focused internal team; owning security risk across identities, endpoints, SaaS applications, cloud infrastructure, data, software supply chain, and third-party vendors; partnering with Engineering and Product to embed security into architecture and the SDLC; establishing core controls for identity and access management, device security, privileged access, data protection, and configuration management; building and leading incident response including detection, investigation, containment, and post-incident reviews; leading security assurance and compliance programs (SOC 2, ISO 27001, FedRAMP, customer-specific standards); owning customer and partner security diligence; creating policies and security education; using Ent's product internally and providing feedback; and giving the executive team and board clear visibility into risk, readiness, and investment priorities.
The company culture emphasizes customer-first thinking, humility, teamwork over showmanship, and urgency in building a durable security company in the AI era.
REQUIREMENTS:
- Experience operating at CISO, Deputy CISO, Head of Security, or equivalent scope in a high-growth technology company; experience building a security program during early-stage growth strongly preferred
- Deep technical understanding of cloud, identity, endpoint, application, product, and infrastructure security with ability to engage directly with engineers on architecture, threat models, control implementation, and remediation
- Experience securing cloud-first environments and modern identity and device ecosystems (AWS, Azure, GCP; Google Workspace or Microsoft Entra ID; macOS and Windows device management)
- Strong command of incident response, vulnerability management, security monitoring, third-party risk, data protection, and secure software development practices
- Experience building and maintaining security assurance or compliance programs (SOC 2, ISO 27001, FedRAMP) and supporting diligence requirements of sophisticated enterprise or government customers
- Current understanding of security risks created by AI systems, employee use of generative AI, autonomous agents, sensitive data flows, and rapidly changing development tools
- Sound risk judgment and practical operating style; ability to move between strategy and execution
- Strong communication skills with technical teams, executives, board members, customers, auditors, and partners
- Low-ego, highly collaborative approach with ability to build trust across functions
