Obsidian Security
Chief Information Security Officer (CISO)
Palo Alto, CA · Exec
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →H-1B wage level
the lottery is wage-weighted — each level is one more entry
This range already reaches Level IV — the maximum four lottery entries.
DOL prevailing wage, 2026-27 wage year · Information Security Analysts (15-1212) · San Jose-Sunnyvale-Santa Clara, CA. Wage level is derived by USCIS from the offered wage, occupation and worksite; the occupation shown is inferred from the job title.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- This role reports to the Chief Legal and Trust Officer.
Responsibilities
- Security Strategy & Executive Communication: Design and execute a global security strategy aligned with business growth objectives. Advise the board and executive leadership on critical cyber risk domains with clear, actionable mitigation plans.
- Cyber Risk Management: Own the cyber risk management program, including security risk assessments, third-party vendor reviews, and executive-backed mitigation initiatives targeting measurable risk reduction.
- Security Architecture, Engineering & Operations: Build and lead teams spanning product/application security, infrastructure protection, and security engineering.
- Product Security: Embed secure-by-design principles across engineering workflows, integrating security early and consistently throughout the SDLC, including secure coding standards, penetration testing, bug bounty programs, and security requirements for AI/ML components (model integrity, training data protection, prompt injection prevention, output validation).
- Build detection and response capabilities for AI-powered attack vectors.
- Drive adoption of AI and automation across the security function, including AI-assisted threat detection, automated incident response, and intelligent vulnerability prioritization.
- Cross-Functional Partnerships: Partner with Engineering and Product to embed security throughout the development lifecycle, AI/ML feature delivery, and infrastructure architecture decisions.
- Support Sales and TAM teams by participating in customer security reviews, responding to questionnaires, and enabling the team to speak confidently about Obsidian's security posture.
- Collaborate with Marketing to develop security-focused content, support thought leadership positioning and inform messaging around trust and security.
- Team Leadership & Budget: Recruit, mentor, and retain a high-performing security organization. Own the security budget with precise, on-target forecasts.
Requirements
- 15+ years in information security, with 5+ years in a senior leadership role (CISO, VP/Deputy CISO, Sr.
- Experience operating as a customer-facing security executive, including direct participation in sales cycles, regulated entity security reviews, and audits.
- Experience managing siginificant security budgets.
- Experience at a cybersecurity vendor, where the CISO role carries both internal and external credibility demands.
- Hands-on experience deploying AI/ML within security operations (SOAR, AI-assisted threat hunting, automated triage) and familiarity with AI security frameworks (OWASP Top 10 for LLMs, NIST AI RMF, MITRE ATLAS).
- Experience securing AI features within a commercial SaaS product, including red-teaming or adversarial testing of AI/ML systems.
- Track record conducting security due diligence for M&A transactions.
- Experience engaging government stakeholders or congressional committees on security matters.
- In compliance with federal law, all persons hired will be required to submit satisfactory proof of identity and legal authorization.
- 15+ years in information security, with 5+ years in a senior leadership role (CISO, VP/Deputy CISO, Sr. Director of Security, or equivalent).
- Deep experience building and scaling security teams across product security, security architecture, infrastructure protection, and enterprise risk management.
- Strong track record securing cloud-native SaaS environments, including container-based workloads and next-generation security tooling (endpoint protection, CI/CD-integrated code scanning, identity-as-a-service, automated monitoring/remediation).
- Experience developing AI governance frameworks and familiarity with AI/ML attack surfaces (model poisoning, prompt injection, training data extraction, adversarial inputs, ML supply chain risks).
- Demonstrated success improving security program maturity using NIST CSF, ISO 27001, or similar frameworks, with measurable results.
- Proven ability to present to boards, advise executive leadership, and communicate security posture to customers in support of revenue goals.
- Effective cross-functional partner with legal, compliance, and IT leadership in a matrixed environment.
- Master's degree in Information Security, Computer Science, or a related field preferred. Executive leadership education is a plus.
- Preferred
- Background in critical infrastructure security (energy, utilities, telecommunications) in addition to SaaS/technology.
Nice to have
- Master's degree in Information Security, Computer Science, or a related field preferred.
Skills
- Trusted by major Fortune 500 companies T-Mobile, Workday, Snowflake, and S&P Global, Obsidian ranked No.
- Obsidian has also been recognized by Forbes as America's Best Startup Employers in 2026.
Compensation
- $280,000 - $340,000 USD
Benefits
- Competitive compensation with equity and 401k
- Comprehensive healthcare with dental and vision coverage
- Flexible paid time off and paid holiday time off
- 12 weeks of new parent or family leave
- Our competitive benefits packages are designed to support our employees' well-being, both at work and at home.
- For more details on our US benefits, or for information on our international benefits, please see here.
- In addition to a competitive base salary, this position is eligible for equity awards and may be eligible for sales commission or incentive compensation based on the role or function within the company.
- Executive leadership education is a plus.
Company info
- At Obsidian, we are proud to be an equal-opportunity employer.
- Customer Trust & External Presence: Serve as the executive-level security contact for prospects and customers during sales cycles, audits, and security reviews. Represent Obsidian in industry forums and public engagements to build market credibility.
Equal opportunity
- If you have a need that requires accommodation, please contact accommodations@obsidiansecurity.com
This listing is sourced directly from Obsidian Security's careers page and normalized into a canonical job model.