You and the process

With a person
Anna, in-house recruiter
9 years hiring engineers
30 minutes with a real recruiter
They read your CV with you, on a call, and say where the offers are being lost.
Didn’t find what you were looking for? Tell us what to build
River AI Inc.

Security Lead, Product and Infrastructure (InfoSec)

  • Office
  • 6+ years

Salary

$200,000 - 420,000/ year

AI summary

For members

The whole posting in a few lines. Sign up to read it here and on every role you open.

Sign Up to Read

Description

The company is building personal AI that each person owns and shapes. It is rebuilding the full stack, covering personal hardware for local inference, custom training infrastructure, new user interfaces, and deep learning research.

The team includes scientists and engineers from leading tech companies and AI labs, with experience scaling consumer systems to hundreds of millions of users and building pre-training infrastructure for frontier models.

This is a first security hire. The company is looking for a hands-on, technically strong security lead to build the security program from scratch and protect research infrastructure, model weights, corporate assets, and the customer platform while keeping frontier AI development moving quickly.

The role combines engineering leadership, program building, and strategy. You will build capabilities across cybersecurity, detection and response, product security, and operational security, and treat security as something that helps teams build rather than something that blocks them.

Responsibilities

  • Build the security function from the ground up, designing and scaling the full operation: product and infrastructure security, detection engineering, incident response, governance, risk and compliance, and workplace security.
  • Protect the most valuable assets: proprietary model weights, training data pipelines, research clusters, and source code, against skilled adversaries who target AI intellectual property.
  • Create lightweight, automated controls and secure-by-default infrastructure so developers can experiment safely without slow, bureaucratic approval steps.
  • Own corporate IT, identity and access management, and privacy engineering so that employees have a smooth and secure experience.
  • Research and build tooling, including how AI can help with vulnerability discovery, code analysis, and defensive operations, and how products can be made more secure.
  • Act as the external security contact for enterprise customers, regulators, board members, and government partners. Lead the compliance roadmap, including SOC 2, ISO 27001, and FedRAMP, to support commercial and public-sector sales.
  • Recruit and mentor strong security engineers, operators, and researchers who automate repetitive work, build security into the software development lifecycle, and set high standards for the field.

Requirements

  • At least 10 years in security, including significant time at a technology company. Experience at an AI company is preferred.
  • A track record as one of the first or early security executives in a fast-moving, high-stakes environment, comfortable setting strategy while still working close to tooling, architecture, and incident command.
  • Deep expertise in two or more of: detection engineering, incident response, digital forensics, infrastructure security, product or application security, operational security, or secure software development.
  • Hands-on experience securing cloud-native, large-scale distributed systems, container and VM environments, and high-performance compute clusters.
  • A record of building and shipping security tooling or research, whether internal platforms, open-source tools, or commercial products.
  • Strong communication across functions. You can explain technical risk to non-technical leaders, work with research leads on new threat models, and review code and architecture.
  • Genuine interest in AI safety, alignment, and the particular security problems of building AI models and AI agents.
  • Preferred, though you are encouraged to apply even if you do not meet all of these: experience protecting model weights, secure multi-party computation, confidential computing, or supply-chain security at an AI lab or research organization.
  • Preferred: published research, conference talks, or open-source contributions in security engineering or defensive operations.
  • Preferred: experience at a startup or venture-backed company.

Conditions

Based in Palo Alto, California.

Expected base pay is $200,000 to $420,000 USD per year, depending on experience and skills, plus equity.

Visa sponsorship is available, and the company is committed to supporting the process for the right candidate.

Benefits

  • Comprehensive health, dental, and vision insurance.
  • Unlimited PTO.
  • Relocation assistance as needed.

Where you’d work

From the office

Relocation offered

Visa sponsored

About the company

River AI Inc.

  • Industry: AI

Office in Palo Alto, United States

Your chances

Worth a look before you spend an evening tailoring a CV for it.

  • 22 checks run
  • 3 red flags

Still hiring?

13 checks

No red flags

How crowded?

9 checks

3 red flags

Fits Me

How well does this role fit you?

Answer a few questions or drop your CV, and every role gets a fit score with the reasons, this one first.

  • Your field
  • Level
  • Stack
  • Work model
  • Salary floor
  • Must-haves
Details14 facts · Role, Location, Compensation, Employment, Company
Seniority
Lead
Type
Full-time
Equity
Equity offered
Industry
AI
Specialty
Security
Region
United States
Show 8 more factsShow less

Role

Category
DevOps & Infrastructure
Specialty
Security
Seniority
Lead
Experience
10+ years

Location

Work model
Office
Region
United States
Office
  • Palo Alto, United States
Relocation
Offered
Visa sponsorship
Sponsored

Compensation

Salary
$200,000 - 420,000 / year
Pay period
Annual
Equity
Equity offered

Employment

Type
Full-time

Company

Industry
AI

Something wrong with this vacancy?

Similar vacancies

Share this vacancy

What's wrong with it?

The employer never sees who reported.

Reason