Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Security Lead role.
Rezi rewrites your resume against Sunset's job description. Free.
Tailor your resume to this Security Lead role.
Rezi rewrites your resume against Sunset's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Security Lead posting at Sunset — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Security Lead posting at Sunset — free, in seconds.
About the Role
Sunset handles internal enterprise data from collaboration tools, documents, files, and business systems, then transforms it into de-identified datasets that remain useful. We also build software that can retrieve information, guide workflows, and take carefully bounded actions. Security is part of whether these products can exist, not a review added after they are built. You will lead security across the company. The scope includes our products and cloud systems, the enterprise data we acquire and deliver, employee and contractor access, vendors, AI tool authority, incident readiness, and the human workflows through which consequential Dissolution work gets done. You will find the risks that could genuinely limit Sunset and turn them into technical, operational, and organizational controls that work in practice. This is a hands-on individual-contributor role. You will write code, review architecture, test technical and human systems, lead exercises and incidents, and create secure defaults other teams can operate. You own the company-wide security program, but the people who run each product, system, and operation remain responsible for implementing and following its controls. You are not a one-person IT, legal, compliance, or operations department.
Responsibilities
- Establish Sunset's company-wide security program, current attack surface, highest-consequence risks, and prioritized roadmap
- Threat-model product, data, AI, cloud, workforce, vendor, delivery, and human operational workflows, then stay involved through implementation and verification
- Build and improve controls for identity, authorization, tenancy, sensitive data, credentials, logging, secure execution, and customer delivery
- Define and verify workforce-security requirements for accounts, endpoints, onboarding, offboarding, contractors, vendors, training, and access reviews
- Work with Dissolution Operations to secure identity checks, approvals, segregation of duties, documents, money or asset-related actions, exceptions, and evidence of human decisions
- Find vulnerabilities through code review, architecture review, testing, production evidence, and attacker-minded investigation
- Lead the security side of incidents and exercises, including containment, recovery, learning, and durable remediation
- Create secure defaults, tooling, and review triggers that let product, machine learning, data, and platform teams move independently
- Maintain the security control framework and evidence for customer reviews and SOC 2, while keeping each control with an accountable operating owner
- Work with leadership on risk acceptance and with legal, compliance, and privacy partners on decisions outside the engineering function
- Use AI tools deeply for security analysis and engineering while treating generated findings, code, and conclusions as evidence to verify
Requirements
- At least three years of professional security or software engineering experience, including hands-on work securing production systems
- Strong software engineer with security as a core specialty, comfortable building controls rather than only recommending them
- Experience in a startup environment, able to prioritize consequential risks across a broader set of potential improvements
- Owned security outcomes across several of product engineering, infrastructure, workforce, vendors, compliance, or business operations
- Deep reasoning about application security, identity and authorization, multi-tenant systems, cloud infrastructure, sensitive data, secrets, and incident response
- Ability to think like both a builder and an attacker, explaining abuse paths, affected assets, likely impacts, and mitigations
- Ability to create low-friction defaults and clear decision boundaries instead of making Security the approval step for routine work
- Ability to secure human workflows with approvals, separation of duties, training, evidence, and monitoring without pretending every risk has a software-only solution
- Ability to communicate risk honestly to engineers, executives, customers, and auditors without using certainty not possessed
- Fluent use of modern AI engineering tools and understanding of their authority, data, dependency, prompt-injection, and verification risks
Skills
- Security
- Software Engineering
- Application Security
- Identity and Authorization
- Multi-tenant Systems
- Cloud Infrastructure
- Sensitive Data Handling
- Secrets Management
- Incident Response
- AI Tools for Security Analysis
- Threat Modeling
- Code Review
- Architecture Review
- Testing
- Vulnerability Management
- Customer Trust Evidence
Location
- Remote
Work Type
- Full-time
- Individual Contributor
Experience Level
- Mid-level
- Senior
About the Company
- Sunset was founded to help founders, initially supporting startups through shutting down, and has expanded to unlocking a new revenue stream for all businesses.
- The company recognized that data generated daily through collaboration, communication, and building is valuable training data for AI models.
- Sunset partners directly with frontier AI labs, providing a primary source of proprietary data grounded in real business operations.
- The company has scaled from $0 to a multi-eight-figure run rate in months.
- Sunset has raised capital from top-tier investors including Floodgate, Afore, Ludlow, and Hustle Fund.
- Joining Sunset offers the opportunity to carry outsized responsibility, grow quickly, partner with fast and important companies, and help build a category-defining business from the ground floor.