Head of Security

About the role

RevenueCat makes building, analyzing, and growing mobile subscriptions easy. We power monetization for thousands of apps, from small indie developers to some of the largest apps in the world. Our platform handles billions of events every day and sits in the critical path of our customers' revenue.

Responsibilities

• Learn RevenueCat's architecture, systems, and operational model
• Understand our existing security posture, controls, tooling, and processes
• Build relationships across engineering and infrastructure teams
• Review our current incident response and escalation practices
• Identify high-leverage improvements and key risks
• Own and evolve RevenueCat's security roadmap
• Evaluate risks and policies around AI-assisted development workflows
• Drive meaningful improvements to our overall security posture
• Improve detection, prevention, and response capabilities
• Improve security education and awareness across the company
• Support customer-facing security conversations and reviews
• Help define how the security organization should scale over time
• Establish a mature, pragmatic, high-trust security program
• Build scalable systems that support both security and engineering velocity
• Help RevenueCat stay ahead of the rapidly changing AI-driven threat landscape
• Develop a long-term strategy for security, resilience, and operational trust
• Be viewed internally as a critical technical and strategic leader across the company

Requirements

You are a deeply technical security leader who understands how modern engineering organizations actually work. You know how to improve security without turning the company into a bureaucratic nightmare. You are pragmatic, calm under pressure, and capable of building systems and processes that scale with the company.

Qualifications

• A strong understanding of both infrastructure and application security
• Experience with AWS, distributed systems, developer tools, fintech, mobile, or payments is a plus
• Strong opinions on supply chain security, secure software development, AI-assisted engineering workflows, infrastructure hardening, identity and access management, incident response, and balancing security with engineering velocity

Skills

• Strong communication skills

Benefits

• Competitive equity in a fast-growing, Series C startup backed by top-tier investors, including Y Combinator
• 10-year window to exercise vested equity options
• Full remote and flexible work environment
• 4-5 weeks of suggested time off annually for mental, physical, and emotional recharge
• $2,000 USD for workspace setup and $1,000 USD annual stipend for continuous learning

Pay

Compensation Range: $305K