Head of Security, RevenueCat
$305k
+ Equity
In-app subscription platform
Posted today
In-app subscription platform
21-100 employees
Posted today
$305k
+ Equity
21-100 employees
Company mission
Help developers make more money.
Role
Who you are
- You are a deeply technical security leader who understands how modern engineering organizations actually work
- You know how to improve security without turning the company into a bureaucratic nightmare. You are pragmatic, calm under pressure, and capable of building systems and processes that scale with the company
- You have a strong understanding of both infrastructure and application security. You’ve been involved in real-world security incidents and know how to navigate high-pressure situations with good judgment
- You are comfortable operating with high ownership and ambiguity, and can move between technical details, strategic planning, customer conversations, and incident response without losing context
- You are also excited about building and scaling a strong security organization over time. You know how to recruit great people, raise the bar, and create a security culture that engineers genuinely want to work with
- You have strong opinions on:
- Supply chain security
- Secure software development
- AI-assisted engineering workflows
- Infrastructure hardening
- Identity and access management
- Incident response
- Balancing security with engineering velocity
- Strong communication skills are important in this role. Experience with AWS, distributed systems, developer tools, fintech, mobile, or payments is a strong plus
- Most importantly, you understand that security is not compliance theater. It is a critical part of the reliability, trust, and long-term survival of the business
What the job involves
- RevenueCat makes building, analyzing, and growing mobile subscriptions easy. We power monetization for thousands of apps, from small indie developers to some of the largest apps in the world
- Our platform handles billions of events every day and sits in the critical path of our customers’ revenue. Reliability and security are not support functions here. They are core product requirements
- As the world changes with AI, the security landscape is getting significantly more chaotic. Supply chain attacks, credential theft, AI-assisted phishing, malicious packages, fraud, infrastructure attacks… the pace and sophistication of threats are accelerating quickly
- Within 1 month, you’ll…
- Learn RevenueCat’s architecture, systems, and operational model
- Understand our existing security posture, controls, tooling, and processes
- Build relationships across engineering and infrastructure teams
- Review our current incident response and escalation practices
- Start identifying high-leverage improvements and key risks
- Within 3 months, you’ll…
- Own and evolve RevenueCat’s security roadmap
- Establish clear priorities across infrastructure, application, and internal security
- Partner closely with engineering leadership on architecture and security decisions
- Evaluate risks and policies around AI-assisted development workflows
- Build trust internally as the security leader engineers want to work with, not work around
- Within 6 months, you’ll…
- Drive meaningful improvements to our overall security posture
- Improve detection, prevention, and response capabilities
- Improve security education and awareness across the company
- Support customer-facing security conversations and reviews
- Help define how the security organization should scale over time
- Within 12 months, you’ll…
- Establish a mature, pragmatic, high-trust security program
- Build scalable systems that support both security and engineering velocity
- Help RevenueCat stay ahead of the rapidly changing AI-driven threat landscape
- Develop a long-term strategy for security, resilience, and operational trust
- Be viewed internally as a critical technical and strategic leader across the company
Our take
RevenueCat was founded by developers who understood the complexities of scaling a subscription app firsthand. The company’s software development kit (SDK) solution gives companies the tools they need to build a subscription business for Android and iOS.
Although similar subscription companies exist, RevenueCat’s main differentiator is that its application processing interface is easy to use for developers and accessibly priced - RevenueCat charges a small percentage of an app’s sales instead of a flat fee.
Top companies like VSCO, Notion, WidgetSmith, Buffer, and Fishbrain use RevenueCat to power their subscriptions at scale, and the company is now handling subscriptions for millions of mobile subscriptions across thousands of apps. It continues to expand operations and make new partnerships towards bettering its capabilities for the future.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
23% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
May 2025
$38m
SERIES C
Apr 2024
$12m
SERIES C
Total funding: $106.7m
Company benefits
- Competitive equity in a fast-growing, Series C startup backed by top tier investors including Y Combinator
- 10 year window to exercise vested equity options
- Fully remote work environment that promotes autonomy and flexibility
- Suggested 4 to 5 weeks time off to recharge and focus on mental, physical, and emotional health
- $2,000 USD to build your personal workspace
- $1,000 USD annual stipend for your continuous learning and growth
Company values
- Customer Obsession
- Always Be Shipping
- Own It
- Balance
Articles
Leadership
Jacob Eiting
(Co-Founder & CEO)Background as CTO at Elevate Labs and Software Engineer at Mino Games & Apple.
Miguel Carranza
(Co-Founder & CTO)Previously the Director of Engineering at Elevate Labs and a Software Engineer at MindSnacks.
Share this job
View 15 more jobs at RevenueCat