Head of Security

  • Engineering
  • Full- time
  • San Francisco, CA, USA or Victoria, BC, Canada or Paris, France
Apply now

With over 200 million users in 196 countries, Change.org is the world’s largest technology platform for social change. Our team spans 18 countries and empowers hundreds of millions of people to have a voice and fight injustice. We’re a social impact business, and we’re aiming to build a world where no one is powerless and where creating change is a part of everyday life.

About the role:

Change.org is seeking a Head of Security who will be part of the team responsible for developing, managing, and monitoring our global infrastructure and applications. As a member of our team, you’ll ensure that activists all over the world can securely participate in Change.org actions and truly help make a positive impact on the world. We’re facing exponential growth, so the high-traffic and data security projects such as bot detection, access control, and data encryption, are very interesting. In this role you’ll work on product, network, and physical security, as well as defining our incident response procedures and, above all, fostering a culture of security across the organization. The security and privacy of our employees and users are paramount, and you will help achieve it.

This position reports to the Director of Platform, Infrastructure, and Security. The ideal candidate has experience with application, infrastructure, and physical security, and is comfortable at several different levels of engagement, whether it’s leadership, working with vendors, or direct participation in implementation.

When we get busy, it’s likely that we’re making headline news somewhere. It is a distinct pleasure to know we are providing a safe site that is empowering people all over the world. Our team takes great pride in using our powers for good.

As a member of our team you will:

  • Develop and implement our overall security roadmap
  • Work with and influence constituent engineering teams in building out a secure global service-oriented architecture
  • Develop, schedule, and execute automated security audits on infrastructure using industry standard security frameworks and tooling
  • Manage penetration tests for applications and services
  • Document current and future security procedures and policies.
  • Remediate and write post-mortem reports on security-related issues
  • Be actively involved in design, implementation, and maintenance of infrastructure security across multiple environments
  • Train and socialize security best practices across the company  

This describes you:

  • 5+ years of experience with various web application security frameworks and tools
  • 3+ years of experience with security penetration testing
  • You have experience in Linux/UNIX systems engineering and administration 
  • You are familiar with cloud platforms such as AWS or GCP
  • You can jump into less than ideal situations and make things better
  • You are comfortable developing and delivering training to both technical and non-technical audiences
  • Ability to work in a proactive manner and manage your own queue
  • Ability to travel as required

Nice-to-Have:

  • Experience with SOC-2 or other compliance frameworks
  • Experience with data privacy requirements
  • Proficient in shell scripting and either Ruby or Python
  • Automation experience with configuration management tools such as Chef, Ansible, or Puppet

We’re happy to help you learn what you need to know; we encourage and support each other’s growth and we are open to any candidate with expertise across these areas.

Interested? Great! Here's what you should know:

This is a full-time opportunity in San Francisco, CA, USA or Victoria, BC, Canada or Paris, France.

Change.org is committed to being a diverse and inclusive workplace. We encourage applicants of different backgrounds, cultures, genders, experiences, abilities and perspectives to apply.

All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sexual orientation, gender, gender identity, age, physical disability, or length of time spent unemployed.
Change.org Careers

Outsized impact

Change.org is the fastest growing social change organization in the world, empowering more than 200 million people to create change in their communities.

Amazing people

We are building a world-class team of technologists and creatives along with the most accomplished team of social movement creators in the world.

Extraordinary benefits

Plenty of vacation

Personal growth