(470) 443-4800Get a demo
All roles

Security

Product Security Manager

Full-timeRemoteReports to: Founder and Chief Executive Officer

Our first security hire: build security for the product, the AI agents, client data and the company.

Apply

About SpareBrains

SpareBrains helps small and medium-sized businesses run better. A team of people and AI agents does real work for them. It finds where they’re losing customers online, fixes it, and keeps it running week after week. Our agents work inside our clients’ own accounts and tools, always with the owner’s approval. That makes trust the heart of what we sell.

The role

As SpareBrains’ first security hire and Product Security Manager, you’ll build our security from day one. That covers the product, the AI agents, client data and the company itself. You’ll set the strategy and do hands-on work, and you’ll build and lead the team as we grow.

What you’ll do

Security strategy and programme

  • Own SpareBrains’ security strategy, policies, standards and roadmap.
  • Set priorities and the budget with the CEO.

AI agent security

  • Threat-model our AI agents and workflows, including prompt injection, tool misuse, data leakage and over-broad permissions.
  • Design the guardrails, approval steps and audit logs behind every action an agent takes in a client’s account.
  • Test agents and models before release, including red teaming.
  • Design sandboxing and isolation for agent runs, so no agent can reach beyond its task.

Client accounts and data

  • Design how we get access to clients’ accounts, with the least access needed.
  • Own credential and secrets management, access reviews, and removing access.
  • Govern access for non-human identities, so our agents and service accounts each get scoped, reviewable logins.
  • Set the rules for handling and keeping client information.

Product and application security

  • Build security into how we develop: threat modelling, code review, and static, dynamic and dependency scanning in our build pipeline.
  • Set security checks that must pass before release to production.
  • Scope and run penetration tests, in-house and with outside firms.

Cloud and infrastructure

  • Secure our cloud, hosting and internal tools.

Detection and incident response

  • Set up monitoring and alerts.
  • Write and lead our incident response plan.
  • Handle vulnerability reports.

Trust and compliance

  • Answer clients’ security questionnaires.
  • Publish our security practices.
  • Prepare SpareBrains for security certifications such as SOC 2 and ISO/IEC 42001 when customers require them.

Leadership

  • Hire, lead and mentor the security team as SpareBrains grows.
  • Manage security vendors.
  • Advise the CEO and engineering on security risk.

What you’ll bring

  • A bachelor’s degree or higher in Computer Science, Cybersecurity, Information Technology or a closely related field.
  • 6+ years in application, product or offensive security.
  • Experience leading a security programme, a team and outside security vendors.
  • Hands-on penetration testing and red teaming across web apps, APIs, cloud and infrastructure. OSCP or equivalent.
  • Experience assessing the security of AI and large-language-model applications, and of AI agent systems.
  • Threat modelling (for example STRIDE), a secure development lifecycle, and security tooling in build pipelines.
  • Sound judgement about access, accountability and blast radius when AI agents act for people.
  • Clear communication with engineers, executives and non-technical business owners.

Nice to have

  • Cloud security, on a major cloud provider.
  • Scripting (Python, Bash).
  • Having built a security programme from scratch.

What we offer

A competitive base salary, equity, and the chance to shape security at an AI company from its first day.

How to apply

Send your name, your email and your resume, with links to your work if you like. No cover letter needed.

Apply

Interview process

  1. Intro call. 30 minutes with our founder on the role, your work and your questions.
  2. Role interview. A deeper conversation about how you’d do the job, and the work you’ve done.
  3. Working session. We work through a real problem together, with any tools you like, AI included.
  4. References and offer. We speak to people you’ve worked with, then send the offer in writing.