---
title: 'Head of Security at Mend.io'
canonical: 'https://feeny.ai/job/head-of-security-mend-io-poland-00c81w3dnrze'
type: 'job'
last_seen: '2026-10-16'
---

# Head of Security at Mend.io

- **Company:** Mend.io
- **Location:** Poland
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-30
- **Last confirmed live:** 2026-10-16
- **Apply:** https://jobs.ashbyhq.com/mend-io/6d0e7a32-5bd8-401a-ba5a-6b102688f8c4

## Job description

## Why Mend.io

We are redefining how modern organizations secure software from open source and custom code to AI-generated components. As the creators of the first AI Native AppSec Platform, we help global enterprises stay safe, fast, and compliant in an era of AI-driven development. Our platform combines intelligent automation, deep risk visibility, and developer-first experiences, shaping the future of application security. We are also committed to building a collaborative, empowering workplace. If you are excited about this role but do not meet every requirement, we encourage you to apply. Your perspective could be exactly what we need! Mend is looking for a hands-on Security Operations Lead to drive security operations across our cloud infrastructure, product, compliance, and customer-facing activities. You will work closely with Engineering, Product, IT, Sales, Legal, and company leadership to identify risks, improve controls, respond to security issues, and strengthen Mend’s overall security posture.

## Responsibilities

- Assess security risks across Mend’s product and cloud infrastructure and drive a prioritized improvement plan.
- Own day-to-day cloud and infrastructure security operations, including SIEM/SOC monitoring, WAF, CSPM, access reviews, encryption, and secrets management.
- Lead vulnerability management, including Mend’s HackerOne bug bounty program and remediation coordination with Engineering.
- Lead security incident response and support disaster recovery planning and testing.
- Support customer-facing security activities, including questionnaires, RFPs, and technical security discussions during sales cycles.
- Drive audit and certification activities, including SOC 2 and ISO 27001/27701/27017, and maintain compliance controls and evidence through Drata.
- Manage third-party security assessments and support security and AI governance.
- Serve as a key internal security advisor for teams across the company.
- Own and improve security tooling, automation, and operational processes.

## What We’re Looking For

- Strong experience in Security Operations, Cloud Security, Product Security, or a similar role.
- Hands-on experience with cloud security technologies, vulnerability management, incident response, SIEM, WAF, CSPM, and IAM.
- Experience working closely with Engineering and Product teams.
- Familiarity with SOC 2, ISO 27001, and security compliance frameworks.
- Strong analytical, communication, and cross-functional collaboration skills.
- A practical, hands-on approach with the ability to balance security risk and business needs.

Our Culture At [Mend.io](https://www.mend.io), we are leading the way in securing AI-powered applications, and we believe the best innovations come from teams where everyone feels valued. We are committed to a workplace built on respect, trust, and growth, where learning and flexibility empower people to do their best work.

## About Mend.io

## Company Overview
- **One-liner**: Mend.io provides a unified application security (AppSec) and AI security platform that helps enterprises secure code, dependencies, and AI models from development through runtime.
- **Entity Type**: Private (Series D, $75M raised in 2021)
- **Headquarters**: Boston, Massachusetts, United States (with major R&D hub in Tel Aviv, Israel)
- **Founded**: 2011 (originally as WhiteSource, later rebranded to Mend.io)
- **Founders**: Rami Sass and Azi Cohen

## Core Business
- **Primary industries**: Application Security, AI Security, Software Supply Chain Security, Developer Tools
- **Target customers**: Enterprise B2B – security teams, DevOps, and developers at large organizations
- **Mission**: “Make application security frictionless for developers and scalable for security teams without compromise” – security should empower, not block.

## Products & Services
- **Mend AppSec** (SCA, SAST, DAST, Container Security, License Compliance):
  A full-stack code security platform covering open source risk (reachability-driven SCA), custom code analysis (high-accuracy SAST), runtime API security, container scanning, and license governance. Includes automated SBOM generation and malicious package protection.
- **Mend AI** (AI Security Posture Management – AI-SPM):
  Secures the AI lifecycle with Shadow AI discovery, AI-BOM generation, automated red teaming (CI/CD-integrated adversarial simulations across 8 attack vectors), system prompt hardening, runtime guardrails (behavioral enforcement between users and models), and compliance reporting aligned to EU AI Act.
- **Mend Renovate** (Automated Dependency Updates):
  The world’s most trusted open-source dependency update tool (originally open source). Auto-creates safe, governed pull requests for 90+ ecosystems, with Merge Confidence scoring, grouping, and centralized policy management to reduce both technical and security debt.

## Market Standing
- **Valuation**: Not publicly disclosed (last round – Series D of $75M in April 2021, led by Pitango VC)
- **Key Metrics**:
  - **Annual Revenue** (Private): ~$28.2M (2025 estimate per LinkedIn)
  - **Total Funding**: $121.15M across 5 rounds (Seed 2011, Seed 2013, Series B 2017, Series C 2018, Series D 2021)
- **Notable Investors/Partners**: 83North, Pitango VC, Susquehanna Growth Equity
- **Growth Signals**:
  - Expanded from pure SCA to a unified AppSec + AI security platform
  - Acquired Renovate (2019) and Atom Security (2023) to strengthen capabilities
  - Active job postings up 100% month-over-month (12 current open roles as of mid-2025)
  - 33,918 LinkedIn followers (5% YoY growth)
  - Recognized as a leader in application security testing by analysts (Gartner, Forrester)

## Competitive Advantages
- **Unified code + AI security**: Only platform that connects software supply chain security with AI security (model inventory, red teaming, runtime guardrails) in a single governed workflow.
- **Independent and vendor-agnostic**: Not tied to any specific cloud or model provider – “Three of five AI security vendors are now inside big platforms. We’re not beholden to any model provider.”
- **Pioneering SCA**: One of the first companies to make open source risk visible at enterprise scale, with a widely adopted open-source tool (Renovate) used by thousands of organizations.
- **Developer-first approach**: Security that integrates seamlessly into IDEs, CI/CD, and PR workflows – reducing friction and accelerating remediation (e.g., 75% reduction in time spent on open source audits).

## Strategic Focus
- **Securing the full AI lifecycle**: From AI model discovery and prompt hardening to runtime behavioral controls and compliance (EU AI Act, Cyber Resilience Act, NIST).
- **Compliance as a byproduct**: Continuous inventory, testing, and remediation that produce audit-ready SBOM/AI-BOM documentation without manual overhead.
- **Scaling Renovate adoption**: Pushing Renovate as the standard for automated dependency updates in enterprises, now bundled with Mend’s security scanning.
- **Headcount rationalization**: After an 8.8% workforce reduction, focused investment in AI security, engineering, and go-to-market roles.

## Why Work Here
- **Culture**: “Security should empower, not block” – a developer-empathy culture that values low-friction, high-impact security. Global and diverse team across 12 countries.
- **Work style**: Hybrid/remote-friendly (offices in Boston, Tel Aviv, Germany, Poland, Croatia, India). Engineering culture emphasizes autonomy, open-source contributions, and modern tooling.
- **Engineering focus**: Deep technical challenges in AI security, static analysis, reachability, and large-scale dependency graphs. Active job postings for senior backend, Java, principal software engineer, and agentic code analysis roles.
- **Perks**: Not formally disclosed, but competitive compensation (e.g., Senior Channel Manager ~$137K/year, Fullstack Engineer ~$350K ILS/month) and a strong commitment to learning and innovation.
- **Growth trajectory**: Rapidly expanding into the hottest segment (AI security) while maintaining a strong base in AppSec; early-stage enough for significant impact.

## Sources
1. [mend.io/about-us](https://www.mend.io/about-us/)
2. [mend.io/why-mend](https://www.mend.io/why-mend/)
3. [linkedin.com/company/mend-io](https://www.linkedin.com/company/mend-io)
4. [mend.io/careers](https://www.mend.io/careers/)

## Other roles at Mend.io

- [Digital Success Manager](https://feeny.ai/job/digital-success-manager-mend-io-givatayim-9fys026hd71f) — Givatayim, Israel
- [Social Media Manager](https://feeny.ai/job/social-media-manager-mend-io-poland-jf3xa5mt0nxj) — Poland
- [Head of Product Marketing](https://feeny.ai/job/head-of-product-marketing-mend-io-united-states-gfmkysjjdvca) — United States
- [Graphic Designer](https://feeny.ai/job/graphic-designer-mend-io-poland-nk61qwgt1z1t) — Poland
- [Technical Support Engineer](https://feeny.ai/job/technical-support-engineer-mend-io-poland-fbdztprg1rva) — Poland
- [Regional Sales Manager - AI Team](https://feeny.ai/job/regional-sales-manager-ai-team-mend-io-united-states-d9n8xy0p44tf) — United States
- [Account Executive, EMEA & APAC](https://feeny.ai/job/account-executive-emea-apac-mend-io-givatayim-r00hjz6m31ga) — Givatayim, Israel
- [Account Executive](https://feeny.ai/job/account-executive-mend-io-united-states-zxfmh7y5g272) — United States
- [Head of Security](https://feeny.ai/job/head-of-security-embedding-vc-san-francisco-yt0qgf1vw3cp) — San Francisco, CA
- [Head of Security](https://feeny.ai/job/head-of-security-morpho-paris-aad0r2vv27gh) — Paris, France