Security Trust and Assurance Manager

Job Description

Job Description

Who is Sonar?

Sonar is driving the future of agent-centric software development. As the leader in AI code review and verification, we solve a critical problem: ensuring that software generated by AI-assisted developers or autonomous agents is reliable, secure, and maintainable.

Integrating seamlessly with Claude Code, Codex, Cursor, GitHub Copilot, Gemini, and Devin, we help over 75% of the Fortune 100 build trusted, reliable, compliant software. Customers who use Sonar are 44% less likely to report an outage due to AI-generated code.

We believe code verification is the critical missing link in the Agent-Centric Development Cycle (AC/DC). Industry giants like Nvidia, ServiceNow, Booking.com, Goldman Sachs, AstraZeneca, and Ford Motor Company.count on us to provide independent, explainable, consistent review and governance of their AI-generated code via products like:

• SonarQube: The world’s leading AI code review and verification platform.

• SonarQube Foundation Agent: Currently topping the leaderboards for agentic software repair.

• SonarSweep & Sonar Context Augmentation: Providing the enterprise-grade context and constraints agents need to be truly effective.

Our team operates across global hubs in Austin, Bochum, Dubai, Geneva, London, Singapore, Tokyo, and Washington D.C. We move with a mindset we call CODE:

• Committed to our customers and community.

• Obsessed with quality.

• Deliberate in our decisions.

• Effective as one team.

With over $400M in revenue and profitable, fast-paced growth, we are building the backbone of the AI software revolution. If you’re hungry to have an impact, want to build at a fast pace, and ready to work at the forefront of AI, we want to hear from you.

Position description
Our Information Security team's main goal is to build deep trust with our rapidly growing customer base. We do this by ensuring Sonar maintains a top-tier security posture to protect the people who rely on us. We are currently expanding this capability and hiring new members! In this role, you will work hand-in-hand with our CISO and across various teams to shape how we talk to our customers about security, privacy, and compliance and provide accurate and timely information to that audience. Your positive energy and contributions will have a direct impact on our business growth as you embrace Sonar's collective intelligence mindset.

What you will do

• Customer Interaction & Trust Center Enhancement: You will manage a straightforward process for answering security and technical questions from our customers and internal users. You will also enhance and maintain our Trust Center, making sure it proactively answers customer questions and serves as a go-to resource.

• Engineering & Security Collaboration: You will collaborate closely with our Engineering, Product, go-to-market and Information Security teams. Together, you will translate complex technical and architectural details into clear, accurate, and friendly responses for our customers.

• Contract Review & Technical Feedback: You will review customer contracts, MSAs, and DPAs. By partnering with our Legal and Sales teams, you will provide feedback, redlining, and negotiation support on security clauses to ensure everything aligns perfectly with our true capabilities and risk appetite.

• Trust System Management: You will keep our customer trust systems accurate and support a federated security approach across Sonar. You will also get to drive exciting improvements and add new capabilities to our tooling.

• AI Prompt Engineering: You will have the opportunity to develop and refine prompts and automated workflows using LLMs, helping us ensure our security information systems stay exceptionally valid and up to date.

Experience and qualifications

• Unwavering Customer Obsession: You truly view security as a way to enable people. You are passionate about building solutions that help teams innovate and move fast without ever compromising the safety of our organization or our users.

• Contract & Legal Acumen: You have solid experience reviewing, redlining, and providing feedback on security clauses and technical language in customer contracts. You are great at bridging the gap between Legal, Sales, Engineering and InfoSec.

• Technical Diplomacy & Engineering Collaboration: You are a fantastic communicator! You can partner deeply with Engineering to validate technical details and then turn around and explain those complex security requirements in clear, simple business terms for non-technical peers.

• Executive Presence: You are comfortable and experienced in working directly with senior leaders, especially a CISO. You know how to effectively communicate strategy, report on trust metrics, and give sound advice on risk.

• Extensive Multi-Domain InfoSec Expertise: You bring deep experience across several security domains, which might include GRC, Cloud Security, IAM, or Application Security. You are also very familiar with common compliance frameworks like SOC 2, ISO 27001, and GDPR that our customers care about.

• AI Proficiency: You have a proven ability to use AI tools and create complex prompts to solve tricky security problems and automate repetitive governance tasks.

• Autonomous Leadership & Organizational Acumen: You have the strong organizational skills needed to juggle multiple high-stakes projects, audit reviews, and contract negotiations all at once, requiring minimal supervision to achieve broad goals.

Additional comments

This role is based in Austin, TX. We are unable to consider candidates unwilling to be in Austin, but we are willing to relocate the right candidate.

Benefits

• Flexible comprehensive employee benefit package.
• We encourage usage of our robust time-off allocations. You will receive 25 days of PTO per calendar year (on a pro-rated basis depending on your employment start date), with additional time provided for sickness, life events and holidays.
• We offer an exciting 401(k) plan that has a 4% match.
• Generous discretionary Company Growth Bonus, paid annually.
• Fully paid parking in the heart of downtown Austin, Texas.
• Global workforce with employees in 20+ countries representing 35+ unique nationalities.
• We have an annual kick-off somewhere in the world where we meet to build relationships and goals for the company.
• Monthly catered events, and team events.

We value diversity, equity, and inclusion

At Sonar, we believe that our diversity is our strength. We are a global company that values and respects different backgrounds, perspectives, and cultures. We are committed to fostering a diverse and inclusive work environment where everyone feels valued and empowered to contribute their best. We are proud to be an equal opportunity employer and welcome all qualified applicants, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

If you need any accommodation, please reach out to us at View email address on us.fitly.work.

All offers of employment at Sonar are contingent upon the results of a comprehensive background check and reference verification conducted before the start date. 

Applications that are submitted through agencies or third party recruiters will not be considered.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.