--- title: 'Head of Security at Tremendous' canonical: 'https://feeny.ai/job/head-of-security-tremendous-united-states-wakb40749epp' type: 'job' last_seen: '2026-09-08' --- # Head of Security at Tremendous - **Company:** Tremendous - **Location:** United States - **Compensation:** $250k–$330k - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-08-04 - **Last confirmed live:** 2026-09-08 - **Apply:** https://jobs.ashbyhq.com/tremendous/8cf03f9a-d789-4aa5-9f8f-48960a3b66bc ## Job description Tremendous is the global platform built for businesses to send payouts—gift cards and money—to anyone, anywhere, instantly. We're trusted by 20,000+ organizations, from startups to giants like Atlassian, MIT, and United Way, to reach millions of recipients worldwide. We're profitable and growing without outside investors. We're fully remote, with a high-documentation, low-meeting culture that leaves more time for the work that matters—and for your life outside it. Our employee NPS sits in the high 80s. We move billions of dollars through our systems. That makes security existential, and it's why we're making our first dedicated security hire. ## ABOUT THE ROLE You'll be our first Head of Security. There's already a real foundation here—bug bounty, pen tests, automated code and configuration scanning on the production and code side, phishing simulations on the people side. You’ll add to it across access and identity, SecOps and monitoring, incident response, vendor security, employee security practices, and policy. You'll own the whole posture. This is a player-coach role. Early on, you'll do the scoping and the hands-on work yourself; this is not a role where you direct from above. As the work demands it, we're fully prepared to build a team here—and we're looking to you to define what that team should be and when. You'll report to the VP of Engineering https://www.linkedin.com/in/magnusvk/, Tremendous' most senior technical leader. We've deliberately placed security with Engineering so you're set up to drive real implementation fast—embedded with the people whose work you're securing, not siloed in a compliance function. As the security function matures, we'll revisit this. ## WHAT YOU'LL DO - Own Tremendous' security posture end-to-end, partnering with our engineering team on production infrastructure and code security. - Assess where we have gaps, prioritize them, and tackle our highest-leverage gaps first. We’ll have opinions, but you own the prioritization and implementation. - Treat incident response as core, not afterthought. We may not be able to prevent a breach, but your job is making sure it's small, contained, and that we know exactly what to do. - Drive security as a cultural shift across the company—introducing controls incrementally, working with teams rather than over them. "Yes, and," not "no." - Lead our AI-security posture. We invest heavily in AI tooling; your job is to manage that risk and enable it, not to ban it. - Define when and how to staff up the security function, and hire your own team. ## WHAT YOU'LL BRING - Real, hands-on security experience at a company that scaled—ideally as an early security hire who grew with the business through high growth. - Deep experience in at least one core security domain—product/production security, security operations, or access/identity and policy—with enough range to reason across the others. You defined the security posture, not just executed someone else’s playbook. - An engineer's mindset. You reach for code to solve problems and can read our codebase and understand our infrastructure (Ruby on Rails; TypeScript + React; PostgreSQL; Google Cloud). You won't write much day-to-day, but you're not lost in the code. - Judgment over checklists. You can explain the actual risk of a given decision, hold a firm line where it matters, and give ground where "best practice" doesn't apply to us or real business need pulls the other way. You can hold your own in a debate about whether to open up broad data access for AI tooling. - Bedside manner. You drive hard change by bringing the team around to your point of view, rather than just telling them no. Engineers and the rest of the company want to work with you. - Experience building or co-building a small security team is a plus. - Fintech, payments, or regulated-industry experience is a plus. ## WHAT'S COOL ABOUT THE ROLE - You define the function. First security leader, with the budget for the required tools and team. - A real mandate. The push for this hire comes straight from the founders. - We invest in your tools. Everyone has a $5k/month budget for AI tools. Use it. - Competitive pay and equity. Base salary $250,000–$330,000, plus meaningful equity. - Fully remote. Work from anywhere in the Americas. - Great culture. Read more about how we work in our public handbook https://handbook.tremendous.com/. ## About Tremendous ## Company Overview - **One-liner**: Tremendous is a payouts platform that enables businesses to send gift cards, prepaid cards, and money transfers to recipients around the world. - **Entity Type**: Private (bootstrapped, VC‑free, profitable, no outside investors since 2013) - **Headquarters**: California, USA (fully remote team with employees spanning three continents) - **Founded**: 2010 - **Founders**: Nick Baum (CEO) and Kapil Kale (COO) ## Core Business - **Primary industry**: Payouts and rewards infrastructure (fintech / payments) - **Target customers**: B2B – researchers, marketers, HR leaders, class action administrators, nonprofits, and any organization that needs to send incentives or disbursements at scale. - **Mission / purpose statement**: “Rewards and payouts, simplified” – helping businesses deliver rewards and incentives simply, scalably, and stress‑free. ## Products & Services - **Tremendous Platform (SaaS)**: A web‑based dashboard for creating, sending, and tracking one‑time or bulk payouts. Supports 2,500+ gift cards, prepaid cards, money transfers, and charitable donations. Delivers via SMS, email, or bulk link export. - **Tremendous API**: Allows businesses to programmatically integrate payouts into their own workflows, automate incentives, and scale disbursements globally. ## Market Standing - **Valuation**: Not disclosed (company is profitable and has no outside investors) - **Key Metrics** (as of 2025/2026): - $2B+ funds delivered - 80M+ payouts sent - 20,000+ customers (including Google, MIT, Casper, Lyft, United Way, Federal Reserve Bank) - 200+ countries/regions supported - **Notable Investors / Partners**: None – the company bought out its original investors in 2013 and has been fully owned by founders and employees ever since. - **Growth Signals**: Team has grown to 150+ employees across three continents; the company is “constantly bringing on new customers and evolving the product”; profitable with no external pressure. ## Competitive Advantages - **VC‑Free & Profitable**: No outside investors means decisions are made to serve customers and the team, not board decks or fundraising rounds. - **Global Reach & Compliance**: Delivers to 200+ countries with automatic currency conversion and translation; SOC 2 Type II compliant with built‑in fraud prevention. - **Recipient Choice**: Recipients can choose from 2,500+ gift cards, prepaid cards, or money – a UX differentiator that reduces friction. - **Self‑Service & API**: Simple three‑step process for non‑technical users, plus a powerful API for scalable automation. ## Strategic Focus - Expanding product capabilities (e.g., prepaid card offerings) and deepening integrations for enterprise use cases. - Maintaining a lean, low‑meeting culture while scaling the team globally. - Continuing to prioritize customer value over growth‑at‑all‑costs. ## Why Work Here - **Work model**: 100% remote – employees log on from multiple continents. Semi‑annual company offsites and in‑person team meetings. - **Culture**: Autonomy, intentionality, and rationality. Few meetings, deep work, transparency, and no silos. - **Compensation**: Competitive salaries and substantial equity packages for every level. - **Perks**: Unlimited vacation days, generous parental leave, benefits, and a strong focus on work‑life balance. - **Engineering & Product**: Led by co‑founder Kapil Kale; teams are empowered to make decisions and own outcomes. ## Sources 1. [tremendous.com/careers](https://www.tremendous.com/careers/) 2. [tremendous.com/about](https://www.tremendous.com/about/) 3. [tremendous.com/company-history](https://www.tremendous.com/company-history/) 4. [builtin.com/company/tremendous](https://builtin.com/company/tremendous) ## Other roles at Tremendous - [Senior Product Manager - Growth](https://feeny.ai/job/senior-product-manager-growth-tremendous-united-states-7da16ctaxwdp) — United States - [Founding Enterprise Account Executive (EMEA - German Speaker)](https://feeny.ai/job/founding-enterprise-account-executive-emea-german-speaker-tremendous-united-0qh3j62wxx6z) — United Kingdom - [Founding Mid-Market Account Executive (EMEA - German Speaker)](https://feeny.ai/job/founding-mid-market-account-executive-emea-german-speaker-tremendous-united-trtg89gyrk9z) — United Kingdom - [Senior Product Manager - Special Projects](https://feeny.ai/job/senior-product-manager-special-projects-tremendous-united-states-02vcrvjr2hqd) — United States - [Senior Product Designer](https://feeny.ai/job/senior-product-designer-tremendous-united-states-qkr046hktbpz) — United States - [Sales Development Representative, Outbound](https://feeny.ai/job/sales-development-representative-outbound-tremendous-austin-gkq6vm41qykv) — Austin, TX - [Sales Development Representative, Outbound](https://feeny.ai/job/sales-development-representative-outbound-tremendous-united-states-gvvfz14y8ncm) — United States - [Sales Development Representative, Outbound](https://feeny.ai/job/sales-development-representative-outbound-tremendous-atlanta-ea41wjk7pmwx) — Atlanta, GA - [Founding Sales Development Representative (DACH)](https://feeny.ai/job/founding-sales-development-representative-dach-tremendous-united-kingdom-0s4vrpp62k29) — United Kingdom - [Senior Product Manager](https://feeny.ai/job/senior-product-manager-tremendous-united-states-wmt362mffbvk) — United States