Head of Security

The role

You will lead a security organization responsible for the end-to-end security strategy across smart electrical panels, embedded firmware, cloud infrastructure, mobile applications, and enterprise IT. You will define the multi-year security roadmap and manage total risk exposure.

What you will do

• Define, own, and execute a comprehensive multi-year enterprise and product security roadmap.
• Present security posture and risk exposure to executive leadership and the board.
• Partner with engineering teams to embed security across the product development lifecycle.
• Oversee threat modeling, penetration testing, and security requirements for hardware.
• Secure the Over-The-Air update pipeline, cryptographic key management, and embedded system communications.
• Integrate automated security tooling into CI/CD pipelines.
• Secure AI and machine learning infrastructure and develop threat models for ML pipelines.
• Govern enterprise IT security and lead the transition toward a Zero Trust architecture.
• Build and operate a vulnerability management program and lead the Product Security Incident Response Team.
• Recruit, mentor, and lead a team of security engineers, architects, and GRC specialists.

Required qualifications

• 10+ years of progressive experience in cybersecurity
• At least 5 years in a security leadership role at a hardware, consumer electronics, IoT, or software-defined product company
• Deep technical expertise spanning cloud-native architectures (AWS/GCP), application security, and connected device/embedded security
• Hands-on engineering background
• Proven track record of operating at the executive level
• Strong working knowledge of steering organizations through complex compliance audits (SOC 2, ISO 27001)
• B.S. or M.S. in Computer Science, Computer Engineering, Cybersecurity, or equivalent practical experience

Nice to have

• Industry-recognized leadership certifications (e.g., CISSP, CISM, CISA)

Benefits

• Competitive compensation + equity grants
• 100% employee premiums for base plans on medical, dental, vision
• Options for additional coverage
• Parental leave up to twenty four (24) weeks depending on eligibility
• Comfortable, sunny office space located near BART and Caltrain public transit
• Employee Resource Groups
• Monthly social events
• SPANcakes recognition breakfast
• Lunch, and learns
• Flexible hours
• One holiday per month
• Flexible time off

About the company

SPAN is a mission-driven company designing, building, and deploying products that electrify the built environment, reduce carbon emissions, and slow the effects of climate change. The company is headquartered in San Francisco’s SoMa neighborhood.