VP, Security

AI security team hired and shipping: internal AI gateway live, agent identity model enforced ahead of broad agent rollout, prompt abuse pipeline running in production

Zero-drama Series D security diligence and a customer-facing trust posture that accelerates enterprise deals rather than slowing them

RBAC, secrets remediation, and JML automation moving access from person-accumulated to role-driven

SOC 2 and PCI technical controls sustained without heroics, with a crisp operating boundary established with legal's compliance and privacy function

A security org that engineering wants to work with: gates that block only when the issue is real and the fix is clear

12+ years in security with 5+ leading security organizations, ideally through hypergrowth and a major fundraise or IPO-track diligence process

Deep technical credibility: you can whiteboard an agent identity model, argue the details of an AI gateway architecture, and review a detection engineering backlog without a translator

Genuine, current conviction about AI security. You've thought hard about prompt injection, agentic access, model-mediated data exfiltration, and LLM red teaming, and you have opinions about what actually works

Builder of net-new functions, not just an operator of mature ones. You've taken a domain from zero headcount to a working team with real controls

Fluent in cloud-native security: AWS identity, CSPM, EDR and SIEM operations, modern AppSec tooling in CI

Comfortable owning corporate IT: identity platforms, endpoint fleets, and SaaS governance as extensions of the security mission, not a side duty

Executive presence: you can brief a board, close an enterprise customer's security review, and tell leadership no with a better alternative attached

Bias toward enablement. You believe security's job is to make the safe path the fast path, and you remove low-value controls as readily as you add high-value ones

Experience securing customer-facing AI or LLM products at scale

Background in payments, travel, or another PCI-regulated, high-transaction-volume environment

Experience partnering with legal on privacy programs and regulatory frameworks (GDPR, CCPA, emerging AI regulation)

Most VP of Security roles are about maturing what exists. This one is about defining how an AI-native company defends itself while the threat model is still being written. You'll inherit a clean foundation, approved headcount, executive air cover, and a company that treats AI as its operating model rather than a feature. Join us on this mission to reshape how businesses experience travel, and help build the security foundation every AI at Engine runs on.

We accept applications for this role on an ongoing basis. We review applications as they are received and encourage interested candidates to apply early.

Compensation Our compensation packages are based on several factors, including your experience, expertise, and location. In addition to a competitive base salary, all roles receive equity. Depending on the role, total compensation may also include an annual bonus. Your recruiter will share your complete compensation package as you move through the process.

The Engine Edge: Perks & Compensation We believe in rewarding great work with great benefits:

Compensation: Competitive base pay tied to role and experience, with equity for all employees. Some roles are also eligible for bonuses or commissions.

Benefits: Check out our full list at engine.com/culture

Environments for Success: Different roles have different needs in terms of the environments that drive success which is why we have a hybrid-hub model. Whether you are in one of our amazing offices or fully remote, we'll make sure you have what you need to succeed.

Perks and benefits may vary based on employment type, location, and more