Head of Security

As the Head of Security at SPAN, you will lead a high-performing security organization at the forefront of the clean energy transition. This is a critical executive leadership role responsible for the end-to-end security strategy across our entire ecosystem: spanning our smart electrical panels, embedded firmware, cloud infrastructure, mobile applications, and enterprise IT. You will work closely with elite hardware and software engineers, driving technical excellence and embedding security into the DNA of how we build the future of home electrification. You will define the multi-year security roadmap, manage our total risk exposure, and ensure the safety, resilience, and privacy of our customers' energy data and critical home infrastructure.

Responsibilities

Define, own, and execute a comprehensive multi-year enterprise and product security roadmap; Present to executive leadership and the board on security posture, program maturity, and total risk exposure; Partner with hardware, firmware, and platform engineering teams to embed security across the product development lifecycle; Oversee threat modeling, penetration testing, and security requirements for hardware; Secure the Over-The-Air (OTA) update pipeline, cryptographic key management, and embedded system communications; Champion a security by design culture for cloud backend and customer-facing mobile applications; Integrate automated security tooling (SAST, DAST) into CI/CD pipelines; Secure AI and machine learning infrastructure, develop threat models for ML pipelines, and establish data governance and privacy guardrails for AI workloads; Govern enterprise IT security and lead the transition toward a Zero Trust architecture; Oversee endpoint defense (EDR), identity and access management (IAM), and secure network architecture; Build and operate a vulnerability management program and lead the Product Security Incident Response Team (PSIRT); Establish coordinated disclosure processes, manage bug bounty programs, and coordinate third-party red team engagements; Define and author the enterprise security policy framework aligned with SOC 2, ISO 27001, NIST, and IoT/energy security standards; Oversee supply chain security, SBOM practices, and third-party vendor risk; Recruit, mentor, and lead a team of security engineers, architects, and GRC specialists

Requirements

10+ years of progressive experience in cybersecurity; at least 5 years in a security leadership role at a hardware, consumer electronics, IoT, or software-defined product company; deep technical expertise in cloud-native architectures (AWS/GCP), application security, and connected device/embedded security; hands-on engineering background; ability to influence technical teams without relying solely on direct authority; demonstrated ability to build, scale, and up-level security programs; proven track record of operating at the executive level and translating technical cyber risks into business terms; strong working knowledge of SOC 2 and ISO 27001 compliance audits and data governance and privacy frameworks; passion for SPAN's mission; B.S. or M.S. in Computer Science, Computer Engineering, Cybersecurity, or equivalent practical experience

Nice to have

Industry-recognized leadership certifications (e.g., CISSP, CISM, CISA) highly preferred

Benefits

Competitive compensation; equity grants; 100% employee premiums for base medical, dental, and vision plans with options for additional coverage; parental leave up to 24 weeks depending on eligibility; office located near BART and Caltrain public transit; Employee Resource Groups; monthly social events; SPANcakes recognition breakfast; lunch and learns; flexible hours; one holiday per month; flexible time off