Skip to content
Esc
Internships in Canada
New-grad roles in Canada
Remote roles
Roles that show pay
Postings at high ghost risk
PayWhat student tech roles in Canada pay
Check a linkPaste a posting to see its real age and ghost risk
JobsEvery open tech role
CompaniesWho fills fastest, who leaves postings up
Hiring calendarWhen employers open intern and new-grad roles
Skills gapWhat postings ask for that you don't have
Your resumeScore and fixes
Your matchesOpen roles ranked by your resume
ApplicationsSaved, applied, interviewing, offers
SettingsTheme, text size, motion
How it works

↑ ↓ to move, Enter to open? every shortcut

Keyboard shortcuts

CtrlKor/
Search employers, postings and pages
JorK
Next or previous posting in a list
O
Open the posting's page
Enter
Open it in the preview, on wide screens
S
Save or unsave it
?
This list
Esc
Close
Petual

Security Lead

  • Seen live on Petual's site 2 days ago
  • Senior
Pay
Not stated
Location
San Francisco
Open for
12+ days
First seen
Oct 23, 2026

Posting record

No flags

Open 12+ days

The posting's record, oldest first
  1. Petual's site dates the posting
  2. Ghostless first sees this listing
  3. Last checked: still up
How we know

It hasn't been reposted, listed twice, or left up unusually long, and the posting doesn't say it's a talent pool.

Ghostless records the day it first sees a posting, so a repost can't reset its age. This one was already up when Ghostless started tracking Petual, so its true age is longer.

Last checked Nov 2, 2026.

How well do you match?

See how much of this posting your resume shows, and what it's missing.

Upload your resume

What the posting discloses

Not stated: Pay, real vacancy, AI screening.

Why these three

Ontario requires postings from employers with 25 or more staff to state the pay, whether the vacancy exists, and whether AI screens applicants.

Some employers add pay only on their own site. Check the original posting before you rule it out.

Skills mentioned

About the role

Petual is the AI-powered control tester for the modern enterprise. We automate the most labor-intensive work in internal audit and governance: testing whether a company's financial, operational, and technology controls are effective as designed.

The hard part isn't exclusively speed of processing over a massive data set, it's also correctness. Our agents reason over messy, unstructured evidence screenshots, ledgers, ticket exports, and PDFs to reach a conclusion, and trace all reasoning to the source. When the evidence doesn't support a conclusion, we have to be precise about why, and what would need to be different to support a different outcome. External auditors re-perform our work, so "mostly accurate" means we’re failing.

We're backed by Andreessen Horowitz, First Round Capital, Cowboy Ventures, Elad Gil, and some of the best angel operators in the valley.

The Opportunity

We’re hiring a Security Lead to build and own the security function at Petual. You’ll inherit a strong technical baseline infrastructure as code, established cloud and app-security practices, an early compliance program from a team with roots at Retool and Lyft. From there, you’ll set the strategy, strengthen our posture, and take us through the compliance frameworks needed to serve regulated industries like banking and federal work.

What You’ll Do

  • Own Petual’s security strategy, roadmap, architecture, and day-to-day security program
  • Partner with engineering on application, cloud, infrastructure, and AI-system security
  • Advance vulnerability management, incident response, access governance, and detection evaluating tooling to drive leverage
  • Lead security reviews as a credible counterpart to enterprise customers
  • Own and evolve our compliance program as we pursue new frameworks

What We’re Looking For

  • Strong hands-on engineering. You write production code, and our interview loop includes a coding exercise
  • Experience securing enterprise SaaS handling sensitive data, ideally in fintech, GRC, or another regulated space
  • Experience with AWS, Kubernetes, and infrastructure as code
  • Experience securing AI-powered products or agentic systems
  • A track record taking a company through multiple stages of security maturity

Something wrong with this posting?