Job description
About GlossGenius
GlossGenius is building an ecosystem enabling entrepreneurs to succeed. We empower small business owners to focus on being creators, not admins, by offering a range of business management tools including booking and scheduling, marketing, analytics, payment processing and much more.
Over 80,000 small business owners have chosen to rely on GlossGenius every day to run their entire set of business operations. Joining its powerful, intuitive platform with its vibrant, distinguished brand, GlossGenius is the ideal combination of a fintech, SMB software, and consumer company all in one.
About the Role
As our company’s first security engineering leader, you will be responsible for defining and executing a scalable security strategy that integrates security throughout the product development lifecycle. You will lead a team of security engineers across Application Security, Detection & Response, and GRC, collaborate closely with engineering and product teams, and ensure our products are designed, built, and maintained with security and resilience at their core.
You will report to the VP of Engineering and can be based remotely in the San Francisco Bay Area OR hybrid (Tuesdays & Thursdays in-office) from our NYC headquarters.
What You’ll Do
- Lead, mentor, and grow a high-performing security engineering team (GRC, Detection & Response, Application Security), setting technical direction and priorities.
- Define and implement a comprehensive security strategy that aligns with organizational goals and integrates security best practices across the software and hardware development lifecycle.
- Collaborate with product and engineering teams to embed security-by-design principles, including threat modeling, secure architecture reviews, and risk assessments.
- Oversee security testing programs such as penetration testing, vulnerability assessments, and code reviews; drive remediation efforts.
- Manage security incident response and vulnerability management processes.
- Drive automation of security controls and integrate security tooling into CI/CD pipelines and DevSecOps workflows.
- Ensure compliance with relevant security standards and regulations (e.g., HIPPA, SOC2, PCI).
- Act as a key stakeholder in program and project leadership, participating in risk management, change boards, and security governance.
- Engage with external auditors, clients, and vendors during security assessments and compliance audits.
- Foster a security-first culture by providing training, awareness, and guidance across the company.
What We’re Looking For
- 6+ years of security or software engineering experience and 2+ years of people management experience.
- You may have technical depth in one domain (preferably application security), but have enough breadth to lead across multiple domains (detection & response, GRC, etc.), and can guide a team through designing a secure system.
- Deep understanding of security principles and best practices, and a proven track record of improving security with a bias for action in a fast-moving environment with lots of autonomy
- Strong communication skills, both verbal and written, and proven ability to communicate complex security concepts to non-security partners.
- A strong business acumen and customer-centric mindset, backed by data analytics skills.
Benefits & Perks
- Flexible PTO
- Competitive health & dental insurance options, with premiums partially or fully covered by GG
- In-person opportunities that are designed to help team members foster collaboration and build community (ie; working out of a co-working space, team dinners, and other team building activities)
- Fertility and adoption benefits via Carrot
- Generous, fully-paid parental leave policy
- 401k benefit - employees are eligible to contribute starting day 1 of employment
- Professional Development - employees receive a yearly stipend for approved learning and educational-related expenses
- Pre-tax commuter benefits
- Dependent Care FSA
- Home office support
The starting base salary for this role in New York, California, and Washington is between $193,000 to $260,000 target equity + benefits. The base salary offered is dependent upon many factors including skills, experience, location, and education. The base pay range is subject to change and may be modified in the future. Additionally, this role is currently eligible to participate in GlossGenius’s equity plan as well as a range of health & wellbeing, retirement savings, and other benefits within our total rewards offering.
At GlossGenius, we celebrate our differences and are committed to creating a workplace where all employees feel supported and empowered to do their best work. We believe this benefits not only our employees but our product, customers, and community as well. GlossGenius is proud to be an Equal Opportunity and Affirmative Action Employer.
Personal Information: Notice at Collection for Employees and Applicants
Agency Submissions If a resume or applicant is submitted to GlossGenius by a third party without a signed search agreement in place, it will become the property of GlossGenius and no fee will be paid, irrespective of whether the candidate is hired.
