Opal Security

Lead enterprise customer implementations and integrations, troubleshoot technical issues, develop support documentation and playbooks, and relay product feedback to engineering. | Requires at least five years in customer-facing technical work, preferably in security or identity SaaS, with proficiency in identity protocols, cloud platforms, and infrastructure-as-code tools. | About Opal Security: At Opal, we’re building modern identity governance for the AI era—intelligent access management that empowers enterprises to move fast while staying secure. Our mission is to bring clarity, control, and confidence to complex enterprise environments, helping teams govern access without slowing down innovation. About the Role When a customer's access workflow breaks at 9am on a Monday, or a new enterprise team needs to be live by the end of the quarter, they should be able to count on one engineer who knows Opal inside out. We're hiring a Senior Customer Success Engineer to be that person. You'll be the technical owner of our customers' experience after the sale: you'll get them implemented and integrated, troubleshoot the hard problems, and teach their teams to run Opal confidently. You'll work hand in hand with our Strategic CSM, who owns the executive relationships, so you can stay close to the product and the code. Your responsibilities Be the technical support lead for enterprise customers. Take tier 2/3 issues from tickets and shared Slack channels, investigate bugs and misconfigurations first, and bring engineering a clear reproduction when it needs to go further. Stay accountable until it's resolved. Work to defined response targets by severity. Drive technical adoption. Help customers roll Opal out to more teams, apps and resources, run enablement sessions and office hours, and watch for configuration and usage patterns that signal a problem or an opening. Pass what you find to the Strategic CSM. Lead customer implementations. Run technical kickoff, design the integration plan, and take customers from first connection to go-live: identity provider and SSO setup, SCIM provisioning, cloud and app integrations, and Terraform or API-based configuration. Write what customers need. Contribute to public documentation, sample code, runbooks and troubleshooting guides, and turn recurring issues into articles or product fixes. Build the support and implementation playbook. Define severity levels, escalation paths, handoffs to engineering, and an implementation checklist. Choose and set up the tooling. Automate the repetitive work. Close the loop with product and engineering. Log and prioritize bugs, bring structured customer feedback to the people building Opal, and test fixes with customers. You Might Be a Fit If You: Have 5+ years in a customer-facing technical role. Technical support engineer, solutions engineer, technical account manager, implementation or professional services consultant, or customer success engineer, ideally in security or identity SaaS. Know identity and access. You understand SSO, SAML, OIDC and OAuth, SCIM provisioning, identity providers such as Okta or Entra ID, and how enterprises manage access and reviews. This is the most important technical area for the role. Know cloud and infrastructure as code. Hands-on with AWS, Azure or GCP, and with Terraform and Kubernetes. Have run implementations. You have taken customers from kickoff to go-live, scoped the work, and managed the risks and the customer's own team along the way. Communicate clearly. You write clear tickets, docs and customer updates, and stay calm and precise when a customer is frustrated. Like building the system. You have worked with a ticketing or support platform such as Zendesk, Linear or Jira, and you want to design severity levels, runbooks and playbooks, not only follow them. Thrive on being early. You've worked at a Series A-C company and built process while everything around you moved. You create clarity instead of waiting for it. Its OKAY if you haven’t worked early stage but you gotta want it!

Manage internal security program including operations, compliance, vendor risk, incident response, and IT operations oversight. | 5+ years in security operations, GRC, or IT security with SOC 2 familiarity and vendor management experience. | About Opal Security: The best security and engineering teams use Opal Security, the AI-native access platform, for real-time visibility, policy-as-code, and control over every identity, from employees to service accounts to AI agents. Companies like Databricks, Notion, CoreWeave, and Superhuman rely on Opal. Based in San Francisco, we've raised $59M from Greylock, Battery Ventures, and SVCI, and were named to Notable Capital's Rising in Cyber 2026 list by 150 leading CISOs. Our leadership brings deep security pedigree: CEO Howard Ting (previously CEO of Cyberhaven, CMO at Nutanix), CPO Sameer Mehta (Veza, Citrix), and CTO Alex Pien (Meta), among others who've built category-defining products. The Role We're hiring a Security Manager to own Opal's internal security program. This person will be responsible for our security operations, compliance posture, vendor risk, incident response, and security tooling. This is a hands-on, security-first role for someone who can operate independently, work well with external partners, and keep a fast-moving startup secure without slowing it down. You'll manage our security vendor and partner closely with engineering, operations, and leadership. You'll also oversee IT operations through our managed service provider (MSP), making sure onboarding/offboarding, devices, access, and office infrastructure meet our security and compliance needs. This is not primarily an AppSec role. Product security and AppSec will remain closely partnered with Engineering, though this person will help coordinate security intake, bug bounty operations, vulnerability management, and remediation tracking. We are building Opal together, in person. This role is 3+ days in office in downtown San Francisco. What You'll Own Security Operations Own Opal's internal security program across people, systems, devices, vendors, and office environments Manage security tooling for endpoint protection, SSO, MFA, access reviews, logging, monitoring, and alerting Lead security incident response, including triage, investigation, remediation, communications, and follow-up Run internal access reviews and improve least-privilege practices across company systems Manage physical and digital access controls for the office and internal tools Compliance & Risk Drive SOC 2 compliance work, including control ownership, evidence collection, audit readiness, and auditor coordination Maintain security policies, procedures, exceptions, control documentation, and audit evidence Track security risks and drive practical remediation based on business impact Help turn security and compliance requirements into repeatable operating processes Vendor Security & Vulnerability Management Own vendor security reviews as part of Opal's procurement process Manage ongoing third-party risk, including review cycles, evidence collection, and remediation follow-up Manage Opal's security vendor: set priorities, review deliverables, escalate issues, and hold them accountable Own bug bounty / vulnerability disclosure program operations, including intake, triage coordination, SLA tracking, and reporting Coordinate vulnerability remediation across security vendors, engineering, legal, and business stakeholders IT Oversight via MSP Manage Opal's IT MSP relationship and ensure IT execution supports security and compliance requirements Coordinate secure onboarding/offboarding across accounts, hardware, access, and device posture Hold the MSP accountable for device management, helpdesk, network support, and office infrastructure Oversee office network and A/V decisions, including UniFi networking with VLAN segmentation Evaluate whether MSP scope needs to change as Opal grows What We're Looking For 5+ years of experience in security operations, GRC, IT security, or a similar security-focused role Experience owning or materially driving a company security program Strong familiarity with SOC 2; FedRAMP, ISO 27001, or similar frameworks are a plus Experience with incident response, endpoint security, access reviews, logging/monitoring, and remediation tracking Strong understanding of identity and access concepts: SSO, MFA, least privilege, access reviews, and joiner/mover/leaver processes Experience managing security vendors, consultants, auditors, or other external partners Comfort managing IT operations through an MSP or similar external provider Strong written and verbal communication skills Ability to operate independently, prioritize risk, and drive cross-functional follow-through in a startup environment Nice to Have Experience at a security, identity, or access management company Experience running or coordinating bug bounty / vulnerability disclosure programs Experience supporting federal-readiness, public-sector customers, or FedRAMP preparation Security certifications such as Security+, CISSP, CISM, or similar Experience building or maturing a security program from an early stage