Head of Security

Department: Engineering

Location: San Francisco HQ

Compensation: $325K – $400K • Offers Equity

Employment Type: FullTime

The Role

As our first security hire, you will design, implement, and own the security function of Triumph. Your work will ensure that Triumph can survive any single technical failure, credential compromise, or infrastructure security incident without irreversible loss of funds, data, or company viability.

As the primary security owner across our backend, mobile clients, infrastructure, and internal tooling, you’ll set the standards for how security is built, monitored, and operated at Triumph. You’ll report directly to our CTO + Co-Founder, Jared Geller.

What You’ll Do

• Identity, Access & Privilege Escalation - Own all service account, IAM, and privilege-elevation systems across production infrastructure.

• Blast Radius & Recovery Guarantees - Own disaster-recovery design and execution, ensuring that no infrastructure failure, security incident, or human error can cause irreversible loss of critical data, funds, or system integrity. Define and enforce recovery point (RPO) and recovery time (RTO) objectives for all existential data systems, and ensure infrastructure meets those guarantees.

• Audibility & Forensic Readiness - Ensure all security-relevant actions in production are auditable, attributable, and reconstructable after the fact.

• Compliance - Own the technical implementation of data-protection controls required for GDPR and similar regulations, including data access controls, retention, deletion, and audit ability.

• Backend Trust & Request Authenticity - Own backend controls that ensure client traffic cannot be intercepted, replayed, or modified in a way that leads to irreversible harm, including transport security standards, replay protection, and enforcement of client attestation mechanisms (e.g., App Attest / DeviceCheck).

Qualifications

• 5+ years of experience as a security engineer or infrastructure engineer with deep security ownership at a consumer or high-scale product company.

• Proven experience designing and operating IAM, RBAC, and privilege escalation systems in cloud-native environments (e.g., AWS, GCP, or similar).

• Hands-on experience with disaster recovery planning and implementation, including backups, restore testing, and defining/measuring RPO/RTO.

• Strong background in secure systems design across APIs, backend services, and data stores, including practical familiarity with encryption, transport security, and key management.

• Familiarity with GDPR or similar data protection regulations and translating requirements into concrete technical controls.

• An understanding of how to balance productivity and risk reduction when shipping quickly in a high-growth environment.

• Ability to partner with cross-functional teams (product, infra, mobile, operations) to drive security initiatives.

Why Triumph?

• High growth. Build a high-scale consumer platform that touches gaming, finance, and social with the autonomy to set our web direction.

• High agency. Small, high-impact engineering team that is growing rapidly with significant opportunity for leadership and growth.

• High energy. Passionate team who are proud of our work and velocity (16x year over year growth).

• Competitive salary and benefits. $400/mo lunch credit, healthcare, vision, dental, 401k, etc.