Partner 20, Staff Security Technical Program Manager at Andreessen Horowitz

<p><span style="font-family: 'times new roman', times, serif;">Founded in Silicon Valley in 2009 by Marc Andreessen and Ben Horowitz, Andreessen Horowitz (aka a16z) is a venture capital firm that backs bold entrepreneurs <a href="https://a16z.com/news-content">building the future</a> through technology. We are <a href="https://a16z.com/portfolio">stage agnostic</a>. We invest in seed to venture to <a href="https://a16z.com/growth/">growth-stage technology</a> companies, across <a href="https://a16z.com/ai/">AI</a>, <a href="https://a16z.com/bio-health/">bio + healthcare</a>, <a href="https://a16z.com/consumer/">consumer</a>, <a href="https://a16zcrypto.com/">crypto</a>, <a href="https://a16z.com/enterprise/">enterprise</a>, <a href="https://a16z.com/fintech/">fintech</a>, <a href="https://a16z.com/games">games</a>, and companies building toward <a href="https://a16z.com/american-dynamism/">American dynamism</a>. a16z has $100B+ under management across multiple funds.</span></p> <p><span style="font-family: 'times new roman', times, serif;">We've established a team that <a href="https://a16z.com/about/">is defined by</a> respect for the entrepreneur and the company-building process; we know what it's like to be in the founder's shoes. We've invested in <a href="https://a16z.com/portfolio/">companies</a> like Anduril, Airbnb, Coinbase, Cursor, Databricks, Deel, Figma, GitHub, Roblox, SpaceX, and Stripe. Our team is at the forefront of new technology, helping founders and their companies impact and change the world.</span></p> <h2><span style="font-family: 'times new roman', times, serif;">The Role</span></h2> <p><span style="font-family: 'times new roman', times, serif;">We're hiring a Staff Security Technical Program Manager to run the operating system of the a16z Security team. You'll own the firm's vulnerability management program, drive cross-team security initiatives to completion, and own the planning rhythm that keeps the team and its stakeholders aligned: sprints, OKRs, timelines, and the documentation and ticketing hygiene that make all of it real.</span></p> <p><span style="font-family: 'times new roman', times, serif;">Security at a16z moves fast and touches every part of the firm. We work in close partnership with teams across the firm. Your job is to keep that work on schedule, keep decisions written down, and make sure nothing gets dropped between teams. Leadership should be able to get the real status from you, and engineers should see you as someone who removes obstacles, not someone who adds process.</span></p> <p><span style="font-family: 'times new roman', times, serif;">This role requires an in-office presence 2 days a week, Tuesday and Thursday, in our San Francisco, CA office, with occasional days in our Menlo Park, CA office.</span></p> <h2><span style="font-family: 'times new roman', times, serif;">To join our team, you should be excited to:</span></h2> <ul> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Own security remediation across the firm, end to end: Pull findings from threat models, code reviews, penetration tests, vulnerability management, audits, and incident postmortems into a single tracked backlog, and manage it with clear owners, priorities, remediation SLAs</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Run the vulnerability management program: Scan coverage, patching cadence, exceptions and risk acceptance, and reporting that shows leadership where risk stands</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Work with stakeholders to keep vendor security reviews fast and consistent, and keep requesters informed on where their review stands</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Drive cross-team security initiatives from kickoff through delivery, coordinating work across Security, IT, Legal, HR, and Compliance, and partnering with owners to keep commitments on track</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Build and run the team's execution rhythm: Sprint planning, quarterly OKRs, and ticket hygiene that keeps the work visible</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Raise the bar on documentation: Program docs, runbooks, decision records, and postmortem follow-ups that stay findable and current</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Define and track the metrics that tell us whether our programs are working, and turn them into actionable insights</span></li> </ul> <h2><span style="font-family: 'times new roman', times, serif;">Minimum Qualifications</span></h2> <ul> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">7+ years of technical program management experience, with at least 3 years running security programs</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">A track record of owning a vulnerability management program at scale: SLAs, remediation tracking across teams you don't control, executive reporting, and measurable risk reduction</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Technical fluency to be credible with security engineers: you can read a finding, understand severity and exploitability, and push back on a risk rating with reasons.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Knows the common SaaS tools (okta, Slack,GSuite etc) of an enterprise stack well enough to talk through their security issues with the teams that own them.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Deep hands-on experience with agile execution: sprint planning, OKR frameworks, ticketing systems (Jira, Linear, or equivalent), documentation platforms like Confluence or Notion, and building program reporting in spreadsheets or BI dashboards.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Writing that is clear, brief, and structured</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Ability to build strong working relationships across functions like IT, Legal, Compliance, and engineering, and execute through those partnerships: work gets done with other teams, not around them.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Low ego, high empathy, and the capacity to collaborate effectively with diverse teams</span></li> </ul> <p><span style="font-family: 'times new roman', times, serif;">The anticipated salary range for this role is between $243,000 - $284,000, actual starting pay may vary based on a range of factors which can include experience, skills, and scope.</span></p> <p><span style="font-family: 'times new roman', times, serif;">This role is eligible to participate in the a16z carry program and various discretionary bonus programs as well as benefit and perquisite plans including health, dental, vision, disability, life insurance, 401K plan, vacation, and sick leave.</span></p><div class="content-conclusion"><h2><span style="font-family: 'times new roman', times, serif;"><strong>a16z culture&nbsp;</strong></span></h2> <ul> <li style="font-weight: 400; font-family: 'times new roman', times, serif;"><span style="font-weight: 400; font-family: 'times new roman', times, serif;">We do only first class business and only in a first class way</span></li> <li style="font-weight: 400; font-family: 'times new roman', times, serif;"><span style="font-weight: 400; font-family: 'times new roman', times, serif;">We take a long view of relationships, because we are in the relationship business&nbsp;</span></li> <li style="font-weight: 400; font-family: 'times new roman', times, serif;"><span style="font-weight: 400; font-family: 'times new roman', times, serif;">We believe in the future and bet the firm that way</span></li> <li style="font-weight: 400; font-family: 'times new roman', times, serif;"><span style="font-weight: 400; font-family: 'times new roman', times, serif;">We are all different, we recognize that, and we win</span></li> <li style="font-weight: 400; font-family: 'times new roman', times, serif;"><span style="font-weight: 400; font-family: 'times new roman', times, serif;">We celebrate the good times</span></li> <li style="font-weight: 400; font-family: 'times new roman', times, serif;"><span style="font-weight: 400; font-family: 'times new roman', times, serif;">We do it for the team</span></li> <li style="font-weight: 400; font-family: 'times new roman', times, serif;"><span style="font-weight: 400; font-family: 'times new roman', times, serif;">We play to win</span></li> </ul> <p><span style="font-weight: 400; font-family: 'times new roman', times, serif;">At a16z we are always looking to hire the absolute best talent and recognize that diversity in our experiences and backgrounds is what makes us stronger. We hire candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, Veteran status, and any other status. These differences are what enables us to work towards the future we envision for ourselves, our portfolio companies, and the World.</span></p> <p><span style="font-family: 'times new roman', times, serif;">Our organization participates in E-Verify. Click<a href="https://www.e-verify.gov/employees" target="_blank" data-saferedirecturl="https://www.google.com/url?q=https://www.e-verify.gov/employees&amp;source=gmail&amp;ust=1674233464432000&amp;usg=AOvVaw1-yT1T3ug2xE734Ge62fLD"> here</a> to learn about E-Verify.</span></p> <p><span style="font-family: 'times new roman', times, serif;">Andreessen Horowitz hereby reserves the right to make use of any unsolicited resumes received from outside recruiting agencies and / or individual recruiters without being responsible for payment of any fees asserted from the use of unsolicited resumes.</span></p></div>