Partner 20, Staff Engineer, Enterprise Security

As a Staff Engineer for Enterprise Security at a16z crypto, you own the firm's insider risk, data protection, SaaS security, and secure AI adoption. You'll set strategy, select and implement tooling, write policies with IT, and drive them through to working controls. The firm handles material nonpublic information on deals and portfolio companies, facing real threats including social engineering and data exfiltration. At the same time, a16z is adopting AI tools and agents faster than most firms its size, and securing that adoption safely is core to this role. You'll work day to day with the Head of Cybersecurity, Security Engineering, IT, Legal, and Compliance.

What you'll do

• Own the firm's insider risk and data protection program end to end, including selecting and implementing the next DLP platform and pioneering AI-augmented DLP with LLM-based investigative tooling and automated analysis
• Drive secure AI adoption across the firm: secure the AI tools and agents the firm uses, define guardrails for agentic systems acting on firm data, and build the governance that lets a16z adopt AI quickly without exposing sensitive information
• Own SaaS security posture across the firm's vendors: maintain a prioritized vendor inventory, implement SSPM, establish secure configuration baselines, and monitor for risky changes
• Set authentication and authorization policy with IT, including Okta, device trust, MFA enforcement, and access reviews, and drive enforcement
• Manage EDR across the fleet, covering deployment, coverage, and rulesets on macOS, Windows, and iOS, and work with IT on MDM policies
• Own security through the joiner, mover, and leaver lifecycle, with particular depth on offboarding: access revocation, data holds, and exfiltration checks
• Run and improve the firm's vendor security due diligence process so new tools get a consistent, fast, risk-based review
• Monitor, investigate, and respond to data exfiltration and insider risk events, partnering with Incident Response and Legal
• Participate in the Security team's on-call rotation

What you bring

• 7+ years of experience in security engineering or enterprise security roles
• Deep expertise across Identity and Access Management, authentication and authorization, DLP and insider risk tooling, SaaS security posture management, and endpoint management
• A track record of owning security programs like DLP, insider risk, or SaaS security end to end: setting strategy, selecting vendors, driving implementation across teams you don't control, and being accountable for the outcome
• Hands-on experience securing AI tools and agentic systems in an enterprise environment, including data flow controls, model and tool access governance, and evaluating AI vendors
• Experience with modern enterprise infrastructure and SaaS ecosystems, including Google Workspace, Okta, MDM solutions, SSPM, zero trust architecture, and cloud-native environments
• Experience running third-party and vendor security assessments at scale
• Ability to translate technical risk into language non-technical stakeholders can act on
• Low ego, high empathy, and the capacity to collaborate effectively with diverse teams

What we offer

• Salary range of $243,000 - $284,000, based on experience, skills, and scope
• Participation in the a16z carry program and discretionary bonus programs
• Health, dental, vision, disability, and life insurance coverage
• 401k plan
• Vacation and sick leave
• In-office presence required 2 days per week (Tuesday and Thursday) in San Francisco, CA, with occasional days in Menlo Park, CA

About a16z crypto

a16z is a venture capital firm founded in 2009 by Marc Andreessen and Ben Horowitz, with $100B+ under management. The firm backs bold entrepreneurs across AI, bio and healthcare, consumer, crypto, enterprise, fintech, games, and American dynamism, from seed through growth stage. Notable portfolio companies include Anduril, Airbnb, Coinbase, Cursor, Databricks, Deel, Figma, GitHub, Roblox, SpaceX, and Stripe.