SlipstreamJobsFresh Startup & VC-Backed Jobs

Senior Manager, Information Security

d-Matrix - Santa Clara, CA, United States - In-office

Apply on the company site

SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.

d-Matrix designs and manufactures purpose-built AI inference silicon, systems, and software. As the company's first dedicated Information Security hire, you will build a unified security function consolidating security responsibilities across the organization, with the opportunity to grow a team over time. You will report to the VP of Information Technology and Infrastructure Services and own the security roadmap and budget. Your primary focus will be protecting proprietary chip design IP (RTL, GDSII), EDA workflows, the software supply chain, internal AI agents, and the corporate, cloud, and lab infrastructure. You will partner closely with Silicon and Software Engineering leaders, IT, SRE, and Facilities to maintain both security and operational velocity. Key responsibilities include: - Building and executing a unified security roadmap and budget across corporate IT, cloud, and product development, consolidating tools and managing security vendors - Partnering with IT and SRE to mature identity governance, endpoint detection and response, vendor risk management, and incident response - Leading readiness for compliance programs such as SOC 2 Type II and ISO/IEC 27001 - Protecting chip design IP through least-privilege access, network segmentation, exfiltration controls, and encrypted transfer to foundry and OSAT partners - Partnering with hardware teams to assess foundry, component-sourcing, and logistics risk and co-architecting hardware roots of trust, unique chip identifiers, and secure boot - Establishing trusted software supply chain practices, including SBOMs, signed builds, and provenance tracking for compilers, runtimes, and model artifacts - Securing cloud, colocation, on-premises, API, and customer-facing inference environments by enforcing Zero Trust, phishing-resistant MFA, and DevSecOps practices - Establishing governance and controls for internal AI agents, defending against external bots and agentic traffic, and tracking emerging AI regulations - Partnering with Facilities on lab and physical security and building a security-first culture Requirements: - 7+ years of experience in information security - 3+ years of experience leading security programs or teams - Technical literacy across corporate IT (RBAC, MDM, SIEM), cloud environments (Kubernetes), and CI/CD security - Experience protecting IP-intensive engineering environments, such as semiconductor, hardware, defense, or other sensitive design and source data - Practical understanding of how LLMs and autonomous AI agents operate, interact with APIs, and handle sensitive data - Pragmatic, startup mindset: rigorous security that does not slow hardware development, customer collaboration, or product shipping - Bachelor's degree or equivalent experience Preferred Qualifications: - Direct experience managing semiconductor or hardware supply chain security, such as foundry/OSAT relationships, secure IP transfer, hardware roots of trust, or anti-counterfeiting measures - Experience securing hybrid, colocation, or on-premises lab infrastructure alongside cloud environments - Experience managing compliance audits from initial readiness through SOC 2 Type II or ISO 27001 certification - Active industry credentials, such as CISSP, CISM, or specialized AI/cloud security certifications

Similar roles