Head of Security

About Snorkel

Snorkel AI is the frontier AI data lab, helping teams build the data and environments behind high-performing frontier and agentic AI. We combine technology with research-driven AI data development to create datasets, benchmarks, evals, and custom solutions for real-world AI systems. Founded out of the Stanford AI Lab in 2019, Snorkel works with leading AI labs and enterprises to move from better data to better outcomes. 

Excited to help us redefine how AI is built? Apply to be the newest Snorkeler!

About Snorkel

Snorkel AI is the frontier AI data lab, helping teams build the data and environments behind high-performing frontier and agentic AI. We combine technology with research-driven AI data development to create datasets, benchmarks, evals, and custom solutions for real-world AI systems. Founded out of the Stanford AI Lab in 2019, Snorkel works with leading AI labs and enterprises to move from better data to better outcomes.

Excited to help us redefine how AI is built? Apply to be the newest Snorkeler!

About The Role

Snorkel is hiring a Head of Security to build and lead our security function end-to-end — infrastructure security, application security, and governance, risk & compliance (GRC). You'll own the security function end-to-end — strategy, team, and execution — and operate as the primary security voice with customers, auditors, and the exec team. You'll report to the CTO.

This is a builder's role: you'll take security from its current state to a mature, right-sized function as Snorkel scales, hiring and developing the team as needs grow.

Key Responsibilities

Security Leadership & Team Building

Define Snorkel's overall security strategy, goals, and roadmap across infrastructure, application, and compliance domains

Build, hire, and lead a high-performing security organization — starting lean and scaling deliberately as the company and its risk surface grow

Establish the operating cadence for security (metrics, reporting, incident response, risk register) and represent security posture to the executive team and board

Infrastructure & Cloud Security

Own cloud security architecture and posture across AWS (and other cloud providers as adopted) — IAM, network segmentation, encryption, landing zone design

Direct detection & response capabilities, threat modeling, and vulnerability management programs

Set standards for secure infrastructure-as-code, CI/CD, and secrets management

Application Security

Embed security into the product development lifecycle — secure design reviews, threat modeling for new features, and AI/ML-specific risks (data protection, model/prompt security, training pipeline integrity)

Partner with Engineering and Product leadership to build security into the SDLC without blocking velocity

Own application security tooling and practices (SAST/DAST/SCA, pen testing, bug bounty)

Design identity, access, and activity-monitoring controls that correctly handle Snorkel's non-employee marketplace workforce — external contractor (1099 or similar) experts accessing the platform. This population isn't in scope for standard employee compliance obligations, but provisioning, deprovisioning, access boundaries, and monitoring still need to work correctly for them

Governance, Risk & Compliance (GRC)

Build and run Snorkel's compliance program (e.g., SOC 2, ISO 27001, and customer-driven frameworks) — own audits end-to-end

Establish enterprise risk management practices: risk register, third-party/vendor risk, policy framework

Serve as the primary security point of contact for customer security reviews and questionnaires

Executive & Cross-Functional Partnership

Act as a trusted advisor to the CTO and executive team on security risk and investment tradeoffs

Partner cross-functionally with Legal, Sales, Operations, and Engineering to unblock enterprise deals and support customer trust requirements

Communicate security posture, incidents, and roadmap clea …