Head of Security

The Opportunity

We are hiring a Head of Security (AI & Infrastructure) to own Enthought’s information security: posture, policy, and day-to-day security operations, with agentic AI at the center of it. We deliver scientific software to large enterprise customers, and our developers increasingly work by directing AI coding agents inside customer codebases and cloud environments. This role decides what those agents may access, how customer data and IP are kept from leaking through them, and writes the AI and security policies our customers audit us against. Every policy it writes has to describe a control that actually exists, one you can build or verify, and it has to let delivery teams keep moving. Security is the core of the job, and you will also share IT and DevOps work alongside our DevOps and Support team, more of it while the security workload ramps up. The work is hands-on and practical rather than compliance-led.

Key Responsibilities

• Design end-to-end security and AI governance for Enthought, applying deep knowledge of cloud architecture, identity, and information security to translate customer and business requirements into controls spanning infrastructure, deployment, agent operations, and incident response.
• Own Enthought’s AI policy: approved tools, providers, and harnesses, which AI tools may be used on which customer engagements, and the data-handling rules for prompts, code, and customer data.
• Define the guardrails for agentic operations. Decide what credentials an agent may hold, for how long, with what audit trail, and with what blast radius.
• Prevent information leaking through agentic work, whether that is credentials and tokens exposed through agent actions or customer IP (formulations, data, code) leaving through prompts, tool calls, and web searches.
• Establish audit capability over agent activity, so we can show what our agents did and not only what they were permitted to do.
• Evaluate and approve MCP servers, agent tools, and AI services, working from automated license, privacy, and vulnerability assessments.
• Own security standards and configuration baselines across corporate systems, product infrastructure, and customer-facing deployments.
• Own identity and access architecture, including least-privilege design and non-human identities. The DevOps and support teams execute against it.
• Lead incident response, and maintain and exercise the incident response plan.
• Handle customer security questionnaires, due-diligence reviews, and audit requests, including customer audit rights over our AI governance, routing anything that becomes a contractual commitment through Contract Administration.
• Run the software approval and resource-access workflows, including making the calls, and escalate novel license or contractual questions.
• Review infrastructure-as-code, CI/CD, and container configurations for security, and implement secrets management and credential hygiene.
• Build the tooling behind the policies: scanning, detection, audit, and enforcement, automated wherever possible.
• Serve as the security point of contact for customers and the security escalation point for delivery teams.
• Advise consulting teams on AI and data-handling decisions inside customer engagements, including data residency and customer contract terms.
• Lead security awareness and training, including safe use of AI tools.
• Share hands-on IT support for the Austin office with the DevOps and Support team, including laptop provisioning, onboarding and offboarding, and endpoint security, and contribute to DevOps work where it touches security.
• Work agent-first, using AI tools as your default way to do the work, and set the guardrails that let everyone else do the same safely.

What We Offer

• Meaningful impact. Your work directly advances scientific breakthroughs, from accelerating drug discovery to developing sustainable materials.
• A front-row seat to agentic AI. We are an automation-first company where every role directs AI tools, and you will help define how the industry puts them to work.
• World-class colleagues. You will work alongside some of the smartest, kindest scientists and engineers around.
• Continuous learning. Enthought’s training programs in Python, machine learning, and scientific computing are open to you.
• A global, collaborative culture across our Austin, Cambridge, and Tokyo offices.
• Flexible hybrid work based out of our Austin office.
• Competitive compensation and benefits.