We believe code verification is the critical missing link in the Agent-Centric Development Cycle (AC/DC)
Our Information Security team’s main goal is to build deep trust with our rapidly growing customer base
We do this by ensuring Sonar maintains a top-tier security posture to protect the people who rely on us
We are currently expanding this capability and hiring new members!
In this role, you will work hand-in-hand with our CISO and across various teams to shape how we talk to our customers about security, privacy, and compliance and provide accurate and timely information to that audience
Your positive energy and contributions will have a direct impact on our business growth as you embrace Sonar’s collective intelligence mindset
Customer Interaction & Trust Center Enhancement: You will manage a straightforward process for answering security and technical questions from our customers and internal users. You will also enhance and maintain our Trust Center, making sure it proactively answers customer questions and serves as a go-to resource
Engineering & Security Collaboration: You will collaborate closely with our Engineering, Product, go-to-market and Information Security teams. Together, you will translate complex technical and architectural details into clear, accurate, and friendly responses for our customers
Contract Review & Technical Feedback: You will review customer contracts, MSAs, and DPAs. By partnering with our Legal and Sales teams, you will provide feedback, redlining, and negotiation support on security clauses to ensure everything aligns perfectly with our true capabilities and risk appetite
Trust System Management: You will keep our customer trust systems accurate and support a federated security approach across Sonar. You will also get to drive exciting improvements and add new capabilities to our tooling
AI Prompt Engineering: You will have the opportunity to develop and refine prompts and automated workflows using LLMs, helping us ensure our security information systems stay exceptionally valid and up to date
Benefits
401K Plan: Sonar US matches up to 4% of gross salary
90% healthcare premium coverage for employees, 60% for dependents
Life and disability insurances fully paid by Sonar. Sonar covers 100% of Telemedicine for FTE whom are covered by Sonar medical
EAP (Employee Assistance Program) Health Savings Accounts (HSA, FSA, DCFSA). Supplemental coverage is offered by EE’s expense
Hospital Indemnity, Accident, Critical Illness
Pet Insurance
Time Off: 25 PTO days plus additional days based on seniority and circumstances
Commuting: Public transport reimbursement of 60% for annual subscription
Free parking space
Pension: Sonar UK contributes 50% of the total costs, which amounts to 5% of your gross salary for saving. Employees contribute the other 5%
Flexibility to work from home 2 days a week on Wednesdays and Fridays
Health Insurance: Sonar covers 100% of the employee premiums for medical, dental, and EAP (Employee Assistance Program) plans through BUPA
Time Off: 28 PTO days, plus additional days based on seniority and circumstances
Commuting: we will reimburse 60% towards the cost of an annual public transport pass
Preferred experience
Extensive Multi-Domain InfoSec Expertise: You bring deep experience across several security domains, which might include GRC, Cloud Security, IAM, or Application Security. You are also very familiar with common compliance frameworks like SOC 2, ISO 27001, and GDPR that our customers care about
Technical Diplomacy & Engineering Collaboration: You are a fantastic communicator! You can partner deeply with Engineering to validate technical details and then turn around and explain those complex security requirements in clear, simple business terms for non-technical peers
Contract & Legal Acumen: You have solid experience reviewing, redlining, and providing feedback on security clauses and technical language in customer contracts. You are great at bridging the gap between Legal, Sales, Engineering and InfoSec
Autonomous Leadership & Organizational Acumen: You have the strong organizational skills needed to juggle multiple high-stakes projects, audit reviews, and contract negotiations all at once, requiring minimal supervision to achieve broad goals
AI Proficiency: You have a proven ability to use AI tools and create complex prompts to solve tricky security problems and automate repetitive governance tasks
Executive Presence: You are comfortable and experienced in working directly with senior leaders, especially a CISO. You know how to effectively communicate strategy, report on trust metrics, and give sound advice on risk
Unwavering Customer Obsession: You truly view security as a way to enable people. You are passionate about building solutions that help teams innovate and move fast without ever compromising the safety of our organization or our users
