Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 hours agoWe saw it 47 min after it went up

Security Trust and Assurance Manager

SonarSource124 open roles

Where
Austin
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Trust and Assurance ManagerSonarSource · Austin

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SonarSource's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.8% of postings close within 7 days. Measured by our own scanner across the market. SonarSource postings stay open a median of 30 days.

Share of postings closed within
  1. 1.6%1 day
  2. 3.4%3 days
  3. 7.8%7 days
  4. 14.3%14 days
  5. 33.7%30 days
This job: posted 3 hours ago

SonarSource median: 30 days open

The posting

Who is Sonar?

Sonar is driving the future of agent-centric software development. As the leader in AI code review and verification, we solve a critical problem: ensuring that software generated by AI-assisted developers or autonomous agents is reliable, secure, and maintainable.

Integrating seamlessly with Claude Code, Codex, Cursor, GitHub Copilot, Gemini, and Devin, we help over 75% of the Fortune 100 build trusted, reliable, compliant software. Customers who use Sonar are 44% less likely to report an outage due to AI-generated code.

We believe code verification is the critical missing link in the Agent-Centric Development Cycle (AC/DC). Industry giants like Nvidia, ServiceNow, Booking.com, Goldman Sachs, AstraZeneca, and Ford Motor Company.count on us to provide independent, explainable, consistent review and governance of their AI-generated code via products like:

  • SonarQube: The world’s leading AI code review and verification platform.
  • SonarQube Foundation Agent: Currently topping the leaderboards for agentic software repair.
  • SonarSweep & Sonar Context Augmentation: Providing the enterprise-grade context and constraints agents need to be truly effective.

Our team operates across global hubs in Austin, Bochum, Dubai, Geneva, London, Singapore, Tokyo, and Washington D.C. We move with a mindset we call CODE:

  • Committed to our customers and community.
  • Obsessed with quality.
  • Deliberate in our decisions.
  • Effective as one team.

With over $400M in revenue and profitable, fast-paced growth, we are building the backbone of the AI software revolution. If you’re hungry to have an impact, want to build at a fast pace, and ready to work at the forefront of AI, we want to hear from you.

Position description Our Information Security team's main goal is to build deep trust with our rapidly growing customer base. We do this by ensuring Sonar maintains a top-tier security posture to protect the people who rely on us. We are currently expanding this capability and hiring new members! In this role, you will work hand-in-hand with our CISO and across various teams to shape how we talk to our customers about security, privacy, and compliance and provide accurate and timely information to that audience. Your positive energy and contributions will have a direct impact on our business growth as you embrace Sonar's collective intelligence mindset.

What you will do

  • Customer Interaction & Trust Center Enhancement: You will manage a straightforward process for answering security and technical questions from our customers and internal users. You will also enhance and maintain our Trust Center, making sure it proactively answers customer questions and serves as a go-to resource.
  • Engineering & Security Collaboration: You will collaborate closely with our Engineering, Product, go-to-market and Information Security teams. Together, you will translate complex technical and architectural details into clear, accurate, and friendly responses for our customers.
  • Contract Review & Technical Feedback: You will review customer contracts, MSAs, and DPAs. By partnering with our Legal and Sales teams, you will provide feedback, redlining, and negotiation support on security clauses to ensure everything aligns perfectly with our true capabilities and risk appetite.
  • Trust System Management: You will keep our customer trust systems accurate and support a federated security approach across Sonar. You will also get to drive exciting improvements and add new capabilities to our tooling.
  • AI Prompt Engineering: You will have the opportunity to develop and refine prompts and automated workflows using LLMs, helping us ensure our security information systems stay exceptionally valid and up to date.

Experience and qualifications

  • Unwavering Customer Obsession: You truly view security as a way to enable people. You are passionate about building solutions that help teams innovate and move fast without ever compromising the safety of our organization or our users.
  • Contract & Legal Acumen: You have solid experience reviewing, redlining, and providing feedback on security clauses and technical language in customer contracts. You are great at bridging the gap between Legal, Sales, Engineering and InfoSec.
  • Technical Diplomacy & Engineering Collaboration: You are a fantastic communicator! You can partner deeply with Engineering to validate technical details and then turn around and explain those complex security requirements in clear, simple business terms for non-technical peers.
  • Executive Presence: You are comfortable and experienced in working directly with senior leaders, especially a CISO. You know how to effectively communicate strategy, report on trust metrics, and give sound advice on risk.
  • Extensive Multi-Domain InfoSec Expertise: You bring deep experience across several security domains, which might include GRC, Cloud Security, IAM, or Application Security. You are also very familiar with common compliance frameworks like SOC 2, ISO 27001, and GDPR that our customers care about.
  • AI Proficiency: You have a proven ability to use AI tools and create complex prompts to solve tricky security problems and automate repetitive governance tasks.
  • Autonomous Leadership & Organizational Acumen: You have the strong organizational skills needed to juggle multiple high-stakes projects, audit reviews, and contract negotiations all at once, requiring minimal supervision to achieve broad goals.

Additional comments

Benefits

  • Flexible comprehensive employee benefit package.
  • We encourage usage of our robust time-off allocations. You will receive 25 days of PTO per calendar year (on a pro-rated basis depending on your employment start date), with additional time provided for sickness, life events and holidays.
  • We offer an exciting 401(k) plan that has a 4% match.
  • Generous discretionary Company Growth Bonus, paid annually.
  • Fully paid parking in the heart of downtown Austin, Texas.
  • Global workforce with employees in 20+ countries representing 35+ unique nationalities.
  • We have an annual kick-off somewhere in the world where we meet to build relationships and goals for the company.
  • Monthly catered events, and team events.

We value diversity, equity, and inclusion

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SonarSource's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SonarSource's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SonarSource's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.