Security at most companies is reactive. A checkbox for auditors. A speed bump for engineers. A department that says no. That's not what we're building.

The Company

Sendbird is the #1 CPaaS platform for in-app communications — an enterprise-grade infrastructure company that gives businesses the APIs and SDKs to embed real-time chat, voice, and video directly into their own products. Over 4,000 brands trust us. Seven billion messages flow through our platform every month. 300 million monthly active users.

We powered conversations for DoorDash, Match Group, Noom, Yahoo Sports, Rakuten, and thousands more. We were good at what we did. Really good.

So we asked what comes next. With decades of leadership in communications infrastructure, the answer was clear: AI. In February 2025, we launched our AI agent for enterprise CX. Later that year, we introduced Delight.ai — and the name says everything about what we believe. AI's real promise isn't efficiency. It isn't cost savings. It's restoring what customer experience lost somewhere along the way: the feeling of being understood, of being genuinely cared for. We don't want customers to feel satisfied. We want them to feel delighted.

The Product

Delight.ai is the AI concierge for customer experience. Most AI agents forget you the moment the conversation ends. Ours doesn't. Delight.ai builds memory over time, learns preferences, and connects context across every channel—chat, SMS, email, voice, WhatsApp—without losing the thread. We're building AI that makes customers feel understood, seen, and remembered.

Why Head of IT & Security

We're an AI company handling enterprise-grade conversations at global scale, and our customers trust us with data that matters. That trust isn't a nice-to-have. It's a competitive differentiator. It's why DoorDash and Match Group chose us. It's why we've earned certifications that our competitors are still chasing.

Security here means being a partner to the business, not a blocker. It means building systems that scale as fast as we do. It means someone who understands that being a 24/7 global platform demands proactive security thinking—not just incident response. And it means someone who recognizes that AI doesn't just change our product—it changes the threat surface too.

We're not looking for someone who manages security from a distance. We're looking for a practitioner who rolls up their sleeves, builds programs that work well, and earns trust across the engineering org by being someone people want to work with.

The Role

This reports to the CFO. You'll lead a high-functioning, mature, and global team located in the United States and South Korea, with end-to-end accountability for Security, IT, and Compliance, ensuring these functions work in harmony to support our global scale.

You'll inherit a world-class program that's already SOC 2, HIPAA, ISO 27001, and ISO 42001 compliant. Your job is to take it further. You'll own Sendbird's comprehensive information security programs, manage and evolve our compliance frameworks, partner with engineering, and continuously build a security culture that's embedded in how we work — not bolted on as an afterthought. You'll champion defense-in-depth philosophy, ensuring a multi-layered approach to security that protects our customers, our data, and our reputation.

You'll also own global IT Operations — managing our IT infrastructure, networks, servers, and data, while supporting our expanding use of AI technology across internal systems and how we work. As the primary executive responsible for safeguarding our AI-first innovation, you'll scale our global internal business systems and maintain our position as the most trusted platform for the world's most demanding enterprises.

You'll lead the team, own how we secure our infrastructure, respond to incidents, and hold our position against an increasingly complex threat landscape. This is a hands-on builder role — not a talking-head role.

You might be this person if:

• You've built and run security programs at a B2B SaaS or cloud company—not just inherited them.
• You can walk an engineer through a threat model and walk a CFO through a risk summary—without losing either of them.
• You are well versed in compliance frameworks (ISO 27001, SOC 2, HIPAA, GDPR).
• You've managed or mentored a global security team and taken genuine pride in developing the people around you.
• You are organized and methodical with strong attention to detail and an ability to analyze and interpret information.
• You thrive in ambiguity and build structure where none existed.
• Your instinct when something goes wrong is to fix, document, and improve—not assign blame.
• You treat security as a conversation with the business, not a monologue at it.
• You've started using AI tools to work faster—and you're curious about what that means for the security programs you're building.

You need to have:

• 10+ years of combined experience across security management, IT operations, compliance, or consulting.
• 3+ years leading or managing a team including information security planning, scheduling, assignment, and monitoring of staff resources in an IT function.
• Hands-on experience with audit frameworks: ISO 27001, SOC 2, and/or HIPAA/GDPR.
• Background in global B2B technology, SaaS, or cloud-based businesses.
• Proven track record managing security incidents end-to-end.
• Strong understanding of security and compliance challenges unique to AI/LLMs.
• Bachelor's degree in Information Security, Computer Science, MIS, or related field.

What you'll actually do:

Own the program

• Maintain and continuously improve Sendbird's information security program—policies, processes, and controls that hold up under scrutiny.
• Drive continuous control monitoring to ensure we stay aligned with our chosen audit frameworks.
• Translate complex compliance requirements (HIPAA, GDPR, CCPA) into practical, actionable programs.
• Evaluate and adopt AI-powered security tooling to stay ahead of a threat landscape that's evolving faster than traditional defenses.

Partner with the business

• Work directly with the CTO and engineering teams to embed security into the product development lifecycle, not just review it at the end.
• Raise risk awareness across business stakeholders without crying wolf or creating friction.
• Be the person other teams want to work with—because you solve problems, not just flag them.
• Work with senior leaders to ensure our data privacy protocols are appropriate with our use of AI tools.

Lead the team

• Manage and develop a global lean security team, making sure each hire reflects and advances the goals of the program.
• Be a player-coach—this isn't a delegator role. You're in the work.

Respond and improve

• Establish and maintain incident response protocols that are fast, clear, and practiced—not just documented.
• Continuously strengthen the security posture of a platform that never sleeps.
• Turn every incident into a lesson. Turn every lesson into a control.

Added Value:

• Security certifications: CISM, CISA, CISSP, or equivalent.
• Experience at a global company operating across multiple time zones and regulatory environments.

Why Sendbird

We're a team of builders and thinkers that refuse to optimize for comfort. We're building the AI agent platform for customer experience—and we intend to own the category.

What we offer:

We take care of the people who build the future. Here's some of what you can expect when you join Sendbird:

• Medical, dental, and vision coverage, on us. Sendbird covers 100% of the premium for our employees and roughly 80% for their dependents.
• Generous time off. 20 days PTO, 13 company holidays, 7 sick days, 2 rest & rejuvenation days, 1 volunteer day, and your birthday off.
• $3,500 annual "Be Your Best Self" boost. Spend it on anything that helps you grow. Gym memberships, therapy, books, courses, massages, and more.
• Parental leave for all new parents. Time to be present for the moments that matter most.
• 401(k) from day one. Auto-enrollment, flexible contributions, and access to Vanguard's investment platform.
• HSA & FSA options. Pre-tax accounts to cover healthcare, dependent care, and commuter expenses.
• Life & disability coverage, fully paid. Life insurance and AD&D at 2x your salary, plus short- and long-term disability at no cost to you.
• AI-First Environment. Enterprise access to top LLMs (Claude, ChatGPT, Gemini) and your choice of vibe coding tools.

Pay Transparency

For cash compensation, we set standard ranges for all roles based on function, level, and geographic location. To determine our ranges, we utilize a variety of compensation data benchmarked against similar-stage growth companies. A reasonable estimate of the current salary range for this role is $280,000 – $320,000. This range is specific to the San Francisco Bay market. We consider several factors when making final compensation decisions including, but not limited to, skill sets, experience and training, licensure and certifications, and other business and organizational needs which may cause your specific offer to vary from the amount listed above.

Flexible Work Policy

We offer a flexible work schedule at Sendbird. We also value collaboration and relationship building. With those values in mind, we require all employees to gather with their team in the office three days per week as a minimum. Some of our roles require a more frequent in-office schedule. Please work with your manager to understand the office time requirements for your position.

What diversity and inclusion mean to us

There is no such thing as a perfect candidate and the best employees come from a wide range of backgrounds, experiences, and skill sets. Sendbird is a place where everyone can learn and grow. We respect, promote, and encourage diversity for equal employment opportunities and encourage you to apply if this role excites you.

Sendbird is building the AI workforce of tomorrow, and we hire that way too. Learn more about our interview process, how we evaluate candidates, and the role AI plays along the way.

Security isn't just a checkbox at Delight.ai. It's the foundation everything else is built on. If you believe security should accelerate how people work, not slow them down, keep reading.

The Company

Sendbird is on a mission to build the AI workforce of tomorrow. For over a decade, we built the infrastructure behind conversations—chat, voice, video, messaging APIs—and became the #1 CPaaS platform for in-app communications. 4,000+ brands trust us. 7 billion messages flow through our platform every month. 300 million monthly active users.

We powered conversations for DoorDash, Match Group, Noom, Yahoo Sports, Rakuten, and thousands of others. We were good at what we did. Really good.

We also saw it early: AI would fundamentally reshape how businesses talk to customers. The infrastructure we'd spent a decade building would become commoditized. The value would move up the stack—into intelligence, into experience, into outcomes.

We had a choice: protect what we built, or reinvent ourselves.

We chose reinvention.

In December 2024, we made the full strategic pivot to AI-first customer experience. By February 2025, we'd launched our AI agent for enterprise CX—built on a decade of conversation data, now with intelligence on top. And in November 2025, we rebranded to Delight.ai.

The name says it all. AI's real promise isn't efficiency or cost savings. It's giving customers back something they lost—the feeling of being truly understood and cared for. Not satisfied. Delighted.

The Product

Delight.ai is the AI concierge for customer experience. Most AI agents forget you the moment the conversation ends. Ours doesn't. Delight.ai builds memory over time, learns preferences, and connects context across every channel—chat, SMS, email, voice, WhatsApp—without losing the thread. We're building AI that makes customers feel understood, seen, and remembered.

Why Enterprise Security Engineer

We're building AI that handles real customer conversations at scale. That means identity systems, SaaS stacks, and endpoints that have to work, and stay secure, without getting in the way of the people building and shipping every day.

The threat landscape isn't standing still, and neither are we. This role exists because we need someone who thinks about security the way our engineers think about product: automate what's repetitive, build what's missing, and make the secure path the easy path.

The Role

You'll own enterprise security across endpoints, identity, cloud services, and SaaS applications for a globally distributed team. You'll work directly with IT and Engineering, and you'll use AI-powered tooling to move faster than any traditional security team. This role is for someone who scripts before they click, builds before they buy, and sees automation as a force multiplier, not a nice-to-have.

You might be this person if:

• You automate repetitive security tasks before they become recurring headaches, and you reach for Python or Bash as naturally as you reach for a runbook.
• You treat SaaS sprawl as an engineering problem, not an audit problem, and you build controls that scale without constant manual oversight.
• You think about attacker techniques (MITRE ATT&CK is a starting point, not a ceiling) and design detections that actually catch things.
• You've built or used AI-assisted workflows to speed up threat detection, alert triage, or security reporting, and you're always looking for more places to apply them.
• You hold the "secure by default" bar without being the team that slows everyone else down.
• You can explain risk trade-offs clearly to engineers and business stakeholders, not just security people.
• You're never satisfied with "we have a tool for that" if the tool isn't actually being used well.

You need to have:

• 4+ years of hands-on enterprise security experience, with real depth in endpoint security across a MacOS-heavy fleet (EDR, NGAV, MDM).
• Operational experience with VPN and ZTNA platforms, and working knowledge of modern email security (SPF, DKIM, DMARC).
• Proven ability to secure SaaS platforms with preventive and detective controls, including DLP and logging pipelines.
• Scripting proficiency in Python (strong preference), Bash, or a comparable language, used for automation, not just one-off fixes.

What you'll actually do:

• Harden a global MacOS fleet using EDR, NGAV, and MDM, enforcing patching cadences and security baselines at scale.
• Build and enforce IAM policies (SSO, MFA, SCIM, least-privilege), with automated provisioning and de-provisioning wherever possible.
• Secure Google Workspace and the broader SaaS stack, implementing DLP controls and logging pipelines that surface real data exposure risk.
• Administer and improve VPN and zero-trust remote access infrastructure for a distributed workforce.
• Develop AI-assisted detection and response workflows, automating alert triage, incident timelines, and routine reporting.
• Embed security into how Engineering and IT build and ship, not just how the company audits afterward.
• Monitor the threat landscape, translate attacker techniques into actionable detections, and stay ahead of what's actually being used against companies like ours.
• Build internal security tooling and dashboards where off-the-shelf falls short, using automation pipelines to close the gaps.

Added Value:

• Experience owning a risk-based security roadmap, including prioritization frameworks that tie security investment to actual business exposure.
• Deep familiarity with adversary tactics via MITRE ATT&CK, with hands-on experience designing detection and response strategies around those techniques.

What we offer:

We take care of the people who build the future. Here's some of what you can expect when you join Sendbird:

• Medical, dental, and vision coverage, on us. Sendbird covers 100% of the premium for our employees and roughly 80% for their dependents.
• Generous time off. 20 days PTO, 13 company holidays, 7 sick days, 2 rest & rejuvenation days, 1 volunteer day, and your birthday off.
• $3,500 annual "Be Your Best Self" boost. Spend it on anything that helps you grow. Gym memberships, therapy, books, courses, massages, and more.
• Parental leave for all new parents. Time to be present for the moments that matter most.
• 401(k) from day one. Auto-enrollment, flexible contributions, and access to Vanguard's investment platform.
• HSA & FSA options. Pre-tax accounts to cover healthcare, dependent care, and commuter expenses.
• Life & disability coverage, fully paid. Life insurance and AD&D at 2x your salary, plus short- and long-term disability at no cost to you.

Flexible Work Policy

We offer a flexible work schedule at Sendbird. We also value collaboration and relationship building. With those values in mind, we require all employees to gather with their team in the office three days per week as a minimum. Some of our roles require a more frequent in-office schedule. Please work with your manager to understand the office time requirements for your position.

Pay Transparency

For cash compensation, we set standard ranges for all roles based on function, level, and geographic location. To determine our ranges, we utilize a variety of compensation data benchmarked against similar-stage growth companies. A reasonable estimate of the current salary range for this role is $190,000.00 – $230,000.00. We consider several factors when making final compensation decisions including, but not limited to, skill sets, experience and training, licensure and certifications, and other business and organizational needs which may cause your specific offer to vary from the amount listed above.

What diversity and inclusion mean to us

There is no such thing as a perfect candidate and the best employees come from a wide range of backgrounds, experiences, and skill sets. Sendbird is a place where everyone can learn and grow. We respect, promote, and encourage diversity for equal employment opportunities and encourage you to apply if this role excites you.

Why Sendbird

We're not in maintenance mode. We're rebuilding how businesses connect with their customers using AI, and we're moving fast. If you want to own something real, build things that matter, and work at a company that has the infrastructure, the data, and the conviction to lead this shift, this is the place.

Sendbird is building the AI workforce of tomorrow, and we hire that way too. Learn more about our interview process, how we evaluate candidates, and the role AI plays along the way.

센드버드는 옴니채널 AI와 세계 최고 수준의 검증된 커뮤니케이션 API를 결합하여, 기업이 AI 에이전트를 구축하고 의미 있는 고객 연결을 대규모로 만들어갈 수 있도록 돕습니다.

센드버드는 엔터프라이즈 수준의 안정성, 보안성, 규정 준수를 갖춘 솔루션을 제공합니다. DoorDash, Match Group, Noom, Yahoo Sports를 포함한 4,000개 이상의 글로벌 선도 앱이 센드버드를 신뢰하고 있으며, 매월 70억 건 이상의 대화가 센드버드 플랫폼을 통해 이루어지고 있습니다.

현재까지 실리콘밸리 최정상 투자사로부터 (ICONIQ, SoftBank, Tiger Global, Y Combinator) 누적 총 2억2천만달러 (약 2,450억 원)의 투자를 유치하였으며 국내 최초 기업가치 1조원 이상의 글로벌 유니콘 기업입니다. 캘리포니아 산 마테오의 본사와 서울의 R&D센터 및 APAC 오피스 그리고 뉴욕, 런던, 싱가포르, 인도, 캐나다 등에 오피스를 두고 있습니다.

Sendbird의 Enterprise Security Engineer로서 회사의 비즈니스를 구동하는 내부 정보 시스템과 SaaS 애플리케이션의 보안을 책임집니다.엔드포인트, 아이덴티티 시스템, 클라우드 서비스 전반에 걸쳐 보안 통제를 설계·구현·운영하고,모든 Sendbird 구성원이 안전하면서도 생산적으로 일할 수 있는 환경을 만드는 역할을 수행하게 됩니다. 이 포지션은 IT 및 엔지니어링 팀과 긴밀히 협업하여, 조직 전반에 “Secure by Default” 문화를 정착시키는 핵심적인 역할을 합니다.

이런 일을 하실 수 있어요

• 엔드포인트 보호, 이메일 보안, SaaS 애플리케이션, 안전한 원격 접속 등 엔터프라이즈 보안 capabilities를 개발 및 운영합니다.
• IT 팀과 협력하여 MacOS 환경의 엔드포인트를 강화하고 EDR, NGAV, MDM 플랫폼을 통해 패치, 보안 기준 준수, 리스크 완화를 관리합니다.
• SSO, MFA, SCIM, 최소 권한 원칙 등을 활용하여 아이덴티티 및 접근 관리 정책을 설계하고 적용합니다.
• VPN 및 제로 트러스트 네트워크(ZTNA) 인프라를 운영 및 개선하여 글로벌 직원들의 안전한 근무 환경을 보장합니다.
• Google Workspace 전반에 걸친 보안 통제 및 모니터링을 수행합니다.
• 비즈니스 및 엔지니어링 팀과 협업하여 SaaS 애플리케이션 보안을 강화하고, DLP(데이터 유출 방지), 로깅, 모니터링을 적용하여 데이터 노출을 방지합니다.
• 지속적으로 변화하는 공격 기법에 대응하며,Sendbird의 보안 수준을 향상시킬 수 있는 전략적 개선안을 제안합니다.
• 전사 구성원을 대상으로 보안 인식 및 실천 교육을 수행하여 안전하고 효율적인 업무 환경을 지원합니다.

이런 분과 함께하고 싶어요

• 관련 분야 4년 이상의 유관경력을 보유하신 분
• 대규모 MacOS 환경에서 EDR, NGAV, MDM을 활용해 엔드포인트 보안 통제를 직접 운영한 경험이 있으신 분.
• VPN / ZTNA 등 안전한 원격 접속 인프라 운영 경험
• SPF, DKIM, DMARC 등 이메일 보안 프로토콜 및 피싱 방어 지식 
• SaaS 플랫폼 보안 및 사전/사후 통제 구현 경험을 보유하신 분
• Python, Bash 등 스크립트 언어 활용 능력 (자동화 역량이 있으면 우대)
• 사용자 관점에서 공감하며, 실질적인 보안 결과를 우선시할 수 있는 균형감이 있으신 분
  
  

이런 점이 있으시면 더 좋아요

• 리스크 기반의 보안 로드맵 수립 경험,보안 위험 감소와 조직 보안 수준 개선을 이끈 경험
• MITRE ATT&CK 등 공격자 전술/기법에 대한 이해 및 탐지·대응 전략 적용 경험

센드버드만의 특별한 복지를 소개해요

• 1년뒤부터 행사가능한 실리콘밸리 최고 수준의 스톡옵션
  
• 플레이스테이션, 자전거, 여행 등 자유롭게 사용할 수 있는 현금성 연간 복지포인트 약 400만원
  
• 영어회화, 강의 등 자유롭게 수강할 수 있는 어학 지원금 최대 연간 360만원
  
• 설날, 추석 명절 현금성 특별 복지 포인트 각 20만원씩 총 40만원 
  
• 매주 1회 팀 빌딩 런치 지원
  
• 팀 빌딩 비용 지원
  
• 출퇴근 비용(교통비) 일부 지원
  
• 선릉 오피스 주차 무료
  
• 본인, 배우자, 자녀 모두 포함하는 단체보험 지원
  
• MRI, 유전자검사등을 포함한 1인당 40만원 상당의 건강검진 지원 - 본인 및 가족 1인
  
• 법정 연차 외 7개의 휴가 추가 지급 (Boost leave, Birthday leave, etc)
  
• 맥북 프로 등 최신 업무 기기 지원 (직무별 특별 지원 옵션)
  
• 스낵, 음료수, 라면이 매일 가득 채워지는 무제한 스낵바
  
• 12주 유급 출산 휴가 지원 (엄마, 아빠 모두가능)
  
• 기타 경조사 지원 프로그램 등
  

유연근무제 정책

Sendbird는 유연한 근무 일정을 지원합니다. 협업과 팀워크의 중요도가 높기에, 모든 구성원은 주 3일 이상 사무실에서 함께 모여 일하고 있어요. 일부 역할은 사무실 출근이 더 자주 필요할 수 있으니, 구체적인 요건은 매니저와 상의해 주세요.

센드버드가 생각하는 다양성과 포용

위 요구사항에 100% 부합하지 않으셔도 괜찮습니다. 센드버드는 모두가 배우고 성장할 수 있는 곳이기에 다양한 배경, 경험 및 기술 스택을 가진 누구든 최고의 직원이 되실 수 있다고 생각합니다. 우리는 평등한 고용 기회를 위해 다양성을 존중하고 장려하고 있습니다. 이 포지션이 여러분의 가슴을 뛰게 만든다면 지원해주세요!

센드버드 소개

센드버드는 옴니채널 AI와 세계 최고 수준의 검증된 커뮤니케이션 API를 결합하여, 기업이 AI 에이전트를 구축하고 의미 있는 고객 연결을 대규모로 만들어갈 수 있도록 돕습니다.

센드버드는 엔터프라이즈 수준의 안정성, 보안성, 규정 준수를 갖춘 솔루션을 제공합니다. DoorDash, Match Group, Noom, Yahoo Sports를 포함한 4,000개 이상의 글로벌 선도 앱이 센드버드를 신뢰하고 있으며, 매월 70억 건 이상의 대화가 센드버드 플랫폼을 통해 이루어지고 있습니다.