a16z · San Francisco, California, United States · San Francisco, California, United States
<p><span style="font-family: 'times new roman', times, serif;">Founded in Silicon Valley in 2009 by Marc Andreessen and Ben Horowitz, Andreessen Horowitz (aka a16z) is a venture capital firm that backs bold entrepreneurs <a href="https://a16z.com/news-content">building the future</a> through technology. We are <a href="https://a16z.com/portfolio">stage agnostic</a>. We invest in seed to venture to <a href="https://a16z.com/growth/">growth-stage technology</a> companies, across <a href="https://a16z.com/ai/">AI</a>, <a href="https://a16z.com/bio-health/">bio + healthcare</a>, <a href="https://a16z.com/consumer/">consumer</a>, <a href="https://a16z.com/enterprise/">enterprise</a>, <a href="https://a16z.com/fintech/">fintech</a>, <a href="https://a16zfrontier.com/">frontier</a>, <a href="https://a16z.com/games">games</a>, and companies building toward <a href="https://a16z.com/american-dynamism/">American dynamism</a>. a16z has $100B+ under management across multiple funds.</span></p> <p><span style="font-family: 'times new roman', times, serif;">We’ve established a team that <a href="https://a16z.com/about/">is defined by</a> respect for the entrepreneur and the company-building process; we know what it’s like to be in the founder’s shoes. We’ve invested in <a href="https://a16z.com/portfolio/">companies</a> like Anduril, Airbnb, Coinbase, Cursor, Databricks, Deel, Figma, GitHub, Roblox, SpaceX, and Stripe. Our team is at the forefront of new technology, helping founders and their companies impact and change the world.</span></p> <h2><span style="font-family: 'times new roman', times, serif;">The Role</span></h2> <p><span style="font-family: 'times new roman', times, serif;">We're hiring a Staff Engineer to own enterprise security at a16z: insider risk, data protection, SaaS security, and the secure adoption of AI across the firm. This is a program-ownership role. You'll set the strategy for how the firm protects its most sensitive data, pick and implement the tooling, write the policies with IT, and see them through to working controls.</span></p> <p><span style="font-family: 'times new roman', times, serif;">The threats here are not theoretical. We handle material nonpublic information on deals and portfolio companies, and we see social engineering, data exfiltration risk, and threat actors who specifically target venture capital firms. At the same time, the firm is adopting AI tools and agents faster than almost any company of its size, and doing that safely is a core part of this job. Your work protects the firm, our LPs, and our portfolio companies. You'll work day to day with the Head of Cybersecurity, Security Engineering, IT, Legal, and Compliance.</span></p> <p><span style="font-family: 'times new roman', times, serif;">This role requires an in-office presence 2 days a week, Tuesday and Thursday, in our San Francisco, CA office, with occasional days in our Menlo Park, CA office.</span></p> <h2><span style="font-family: 'times new roman', times, serif;">To join our team, you should be excited to:</span></h2> <ul> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Own the firm's insider risk and data protection program end to end, including selecting and implementing our next DLP platform and pioneering AI-augmented DLP with LLM-based investigative tooling and automated analysis</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Drive secure AI adoption across the firm: Secure the AI tools and agents the firm uses, define guardrails for agentic systems acting on firm data, and build the governance that lets a16z adopt AI quickly without exposing sensitive information</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Own SaaS security posture across the firm's vendors: A prioritized vendor inventory, SSPM, secure configuration baselines, and monitoring for risky changes</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Set authentication and authorization policy with IT, including Okta, device trust, MFA enforcement, and access reviews, and drive it through to enforcement</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Manage EDR across the fleet, covering deployment, coverage, and rulesets on macOS, Windows, and iOS, and work with IT on MDM policies</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Own security through the joiner, mover, and leaver lifecycle, with particular depth on offboarding: Access revocation, data holds, and exfiltration checks</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Run and improve the firm's vendor security due diligence process so new tools get a consistent, fast, risk-based review</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Monitor, investigate, and respond to data exfiltration and insider risk events, partnering with Incident Response and Legal</span></li> <li style="font-family: 'times new roman', times