Chief Information Security Officer (CISO)

Owns Obsidian Security's internal security programme end to end and acts as a visible security leader for customers, partners and the market. The CISO reports to the Chief Legal and Trust Officer and is based in Palo Alto.

The role sets a global security strategy tied to growth, advises the board and executives on cyber risk, and runs the risk programme, including assessments and third-party reviews. It builds and leads teams across product and application security, infrastructure protection and security engineering, overseeing threat detection, SLA-tracked vulnerability management and incident response, with guardrail-based controls for cloud and container workloads. Product security covers secure-by-design engineering, penetration testing, bug bounty and requirements for AI components. The CISO also sets enterprise AI governance, builds defences against AI-driven attacks, and pushes AI and automation inside the security function. Externally, the role joins customer security reviews and audits, supports sales and marketing on trust messaging and represents Obsidian at industry events; internally it owns the security budget and assesses acquisition targets.

Obsidian wants fifteen or more years in information security, five or more in senior leadership, experience scaling security teams and securing cloud-native SaaS, AI governance and AI attack surface knowledge, a record of maturing programmes against NIST CSF or ISO 27001, board-level communication and customer-facing executive experience. A cybersecurity vendor background is preferred.