At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Location: Hybrid In-Office: Hoboken, NJ; Addison, TX; Phoenix, AZ; or Austin, TX
About the Role
We protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team runs the policy, risk, compliance, and customer trust programs that let security-conscious enterprises, regulated industries, and government customers adopt Semperis products with confidence.
As our Senior GRC Analyst, you'll own three core programs: SOC/ISO/HIPAA Audits, customer security questionnaires and upkeep of our security policies and standards. You'll also be the day-to-day point of contact for remediation follow through on audit findings, and you'll support our FedRAMP work on occasion during certification phases.
We're a small team, so you'll back up teammates on vendor risk, risk exceptions, and our Trust Center when the queue gets heavy, and you'll be the person our GRC Analyst turns to for very complex questionnaires. You'll run your programs independently, bring recommendations to the Head of Risk and Compliance on scoping, policy, and higher-risk decisions, and get results through influence rather than authority.
You'll succeed by being accurate, organized, and persuasive with engineers and business owners who don't report to you. You'll have AI and GRC tooling, including Vanta, to help you work efficiently.
What You Will Do
Compliance
Work with the Head of Risk and Compliance for scoping and timing, then work with our PMO and Compliance consultants to prepare for, schedule, evidence, and execute on the fieldwork and reporting phases of the SOC2 Type II and ISO 27001 Audits. You’ll have support as needed from other team members.
Cover HIPAA Audits (Security and Breach Notification Rules) as part of our SOC and ISO work.
Support FedRAMP program and other frameworks as needed by researching control requirements, gathering evidence, reviewing deliverables, or producing documentation.
Take on internal audit, assurance testing, and due diligence work, including M&A, when assigned.
Customer Trust
Own customer, partner, and prospect security questionnaires and due diligence requests. Answer accurately and within SLA, working with Product and Engineering and/or FedRAMP SMEs to confirm answers.
Take on the very complex questionnaires our GRC Analyst escalates, and help the analyst grow in GRC areas that are new to them.
Build and maintain our reusable answer library using a mix of AI-assisted, automated, and manual processes.
Remediation Follow Through
Drive remediation dates with Engineering for non-FedRAMP audit findings: set recommended timelines, track milestones, and follow up with control owners.
Escalate blockers on high-risk items to the Head of Risk and Compliance or the CISO, and hold control owners to deadlines through clear communication and data, without formal authority over their teams.
Policy and Governance
Own the upkeep of our information security policies, standards, and procedures: draft updates and align them with frameworks such as NIST SP 800-53/CSF, ISO 27001:2022, HIPAA, and SOC 2.
Work with policy owners, People Operations, and Legal to get changes reviewed, approved, published, and acknowledged.
Stay current on regulatory, customer, and threat landscape changes, and recommend policy updates before they become audit findings.
Team Coverage and Continuous Improvement
Back up teammates on vendor risk assessments, risk exception reviews, and the commercial Trust Center when an owner is out or the queue is heavy.
Help define and report KPIs and KRIs, and support the cyber risk register.
Help administer our GRC platform (Vanta) and find manual work to automate, such as evidence collection, control monitoring, and framework cross mapping.
Support our security awareness training program.
What You Will Bring (Required)
5+ years of experience in GRC, information security risk, compliance, or IT audit, including experience at a SaaS company.
A degree in Cybersecurity, or one of these certifications: CISSP, CRISC, CISM, or CISA.
SOC 2 Type II and ISO 27001 audit and attestation experience.
Clear written and verbal communication, with the ability to explain technical control details to engineers, business owners, and customers.
A track record of getting results through influence with engineers and other stakeholders who don't report to you.
Preferred Qualifications
Hands-on experience in at least four of these areas: security policy and standards; GRC operations; third party and vendor risk management; cyber and technology risk assessment and risk exceptions; risk registers and risk reporting; customer trust work (questionnaires, due diligence, Trust Center); running an audit or assessment; and security assurance (control testing and gap analysis).
Experience with FedRAMP, NIST 800-53, or other government compliance frameworks.
Hands-on configuration of a modern GRC platform such as Vanta, Drata, OneTrust, Archer, or ServiceNow.
Experience automating control monitoring and evidence collection (\"compliance as code\").
Experience answering customer security questionnaires at scale with AI-assisted tools.
GRC experience at a cybersecurity, identity, or infrastructure software company serving regulated industries.
Familiarity with AI governance frameworks such as ISO 42001 or NIST AI RMF.
Experience with M&A due diligence or IPO readiness, audit test plan development, quantitative cyber risk analysis, or business continuity, incident response, or continuous monitoring plans.
Success Measures (First Year)
In your first 90 days, you take over customer questionnaires, remediation tracking, and policy upkeep, and cross-train on vendor reassessments, with accurate, on-time work.
Coordinate preparation efforts for ISO 27001 Audit scheduled for February 2027.
Questionnaires in your scope are answered within SLA, accurately and without overstating our security posture.
Control owners consistently meet evidence and remediation deadlines without needing escalation.
Our policy set is current, approved, and ready for audit.
You deliver at least one measurable automation or process improvement that reduces manual work for the team.
You're a trusted backup across GRC areas, so the team can rebalance work when it needs to.
Additionally, this position requires the following:
• U.S. citizenship.
#LI-MR1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Location: Hybrid In-Office: Hoboken, NJ; Addison, TX; Phoenix, AZ; or Austin, TX
About the Role
We protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team runs the policy, risk, compliance, and customer trust programs that let security-conscious enterprises, regulated industries, and government customers adopt Semperis products with confidence.
As our Senior GRC Analyst, you'll own three core programs: SOC/ISO/HIPAA Audits, customer security questionnaires and upkeep of our security policies and standards. You'll also be the day-to-day point of contact for remediation follow through on audit findings, and you'll support our FedRAMP work on occasion during certification phases.
We're a small team, so you'll back up teammates on vendor risk, risk exceptions, and our Trust Center when the queue gets heavy, and you'll be the person our GRC Analyst turns to for very complex questionnaires. You'll run your programs independently, bring recommendations to the Head of Risk and Compliance on scoping, policy, and higher-risk decisions, and get results through influence rather than authority.
You'll succeed by being accurate, organized, and persuasive with engineers and business owners who don't report to you. You'll have AI and GRC tooling, including Vanta, to help you work efficiently.
What You Will Do
Compliance
Work with the Head of Risk and Compliance for scoping and timing, then work with our PMO and Compliance consultants to prepare for, schedule, evidence, and execute on the fieldwork and reporting phases of the SOC2 Type II and ISO 27001 Audits. You’ll have support as needed from other team members.
Cover HIPAA Audits (Security and Breach Notification Rules) as part of our SOC and ISO work.
Support FedRAMP program and other frameworks as needed by researching control requirements, gathering evidence, reviewing deliverables, or producing documentation.
Take on internal audit, assurance testing, and due diligence work, including M&A, when assigned.
Customer Trust
Own customer, partner, and prospect security questionnaires and due diligence requests. Answer accurately and within SLA, working with Product and Engineering and/or FedRAMP SMEs to confirm answers.
Take on the very complex questionnaires our GRC Analyst escalates, and help the analyst grow in GRC areas that are new to them.
Build and maintain our reusable answer library using a mix of AI-assisted, automated, and manual processes.
Remediation Follow Through
Drive remediation dates with Engineering for non-FedRAMP audit findings: set recommended timelines, track milestones, and follow up with control owners.
Escalate blockers on high-risk items to the Head of Risk and Compliance or the CISO, and hold control owners to deadlines through clear communication and data, without formal authority over their teams.
Policy and Governance
Own the upkeep of our information security policies, standards, and procedures: draft updates and align them with frameworks such as NIST SP 800-53/CSF, ISO 27001:2022, HIPAA, and SOC 2.
Work with policy owners, People Operations, and Legal to get changes reviewed, approved, published, and acknowledged.
Stay current on regulatory, customer, and threat landscape changes, and recommend policy updates before they become audit findings.
Team Coverage and Continuous Improvement
Back up teammates on vendor risk assessments, risk exception reviews, and the commercial Trust Center when an owner is out or the queue is heavy.
Help define and report KPIs and KRIs, and support the cyber risk register.
Help administer our GRC platform (Vanta) and find manual work to automate, such as evidence collection, control monitoring, and framework cross mapping.
Support our security awareness training program.
What You Will Bring (Required)
5+ years of experience in GRC, information security risk, compliance, or IT audit, including experience at a SaaS company.
A degree in Cybersecurity, or one of these certifications: CISSP, CRISC, CISM, or CISA.
SOC 2 Type II and ISO 27001 audit and attestation experience.
Clear written and verbal communication, with the ability to explain technical control details to engineers, business owners, and customers.
A track record of getting results through influence with engineers and other stakeholders who don't report to you.
Preferred Qualifications
Hands-on experience in at least four of these areas: security policy and standards; GRC operations; third party and vendor risk management; cyber and technology risk assessment and risk exceptions; risk registers and risk reporting; customer trust work (questionnaires, due diligence, Trust Center); running an audit or assessment; and security assurance (control testing and gap analysis).
Experience with FedRAMP, NIST 800-53, or other government compliance frameworks.
Hands-on configuration of a modern GRC platform such as Vanta, Drata, OneTrust, Archer, or ServiceNow.
Experience automating control monitoring and evidence collection (\"compliance as code\").
Experience answering customer security questionnaires at scale with AI-assisted tools.
GRC experience at a cybersecurity, identity, or infrastructure software company serving regulated industries.
Familiarity with AI governance frameworks such as ISO 42001 or NIST AI RMF.
Experience with M&A due diligence or IPO readiness, audit test plan development, quantitative cyber risk analysis, or business continuity, incident response, or continuous monitoring plans.
Success Measures (First Year)
In your first 90 days, you take over customer questionnaires, remediation tracking, and policy upkeep, and cross-train on vendor reassessments, with accurate, on-time work.
Coordinate preparation efforts for ISO 27001 Audit scheduled for February 2027.
Questionnaires in your scope are answered within SLA, accurately and without overstating our security posture.
Control owners consistently meet evidence and remediation deadlines without needing escalation.
Our policy set is current, approved, and ready for audit.
You deliver at least one measurable automation or process improvement that reduces manual work for the team.
You're a trusted backup across GRC areas, so the team can rebalance work when it needs to.
Additionally, this position requires the following:
• U.S. citizenship.
#LI-MR1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Location: Hybrid In-Office: Hoboken, NJ; Addison, TX; Phoenix, AZ; or Austin, TX
About the Role
We protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team runs the policy, risk, compliance, and customer trust programs that let security-conscious enterprises, regulated industries, and government customers adopt Semperis products with confidence.
As our Senior GRC Analyst, you'll own three core programs: SOC/ISO/HIPAA Audits, customer security questionnaires and upkeep of our security policies and standards. You'll also be the day-to-day point of contact for remediation follow through on audit findings, and you'll support our FedRAMP work on occasion during certification phases.
We're a small team, so you'll back up teammates on vendor risk, risk exceptions, and our Trust Center when the queue gets heavy, and you'll be the person our GRC Analyst turns to for very complex questionnaires. You'll run your programs independently, bring recommendations to the Head of Risk and Compliance on scoping, policy, and higher-risk decisions, and get results through influence rather than authority.
You'll succeed by being accurate, organized, and persuasive with engineers and business owners who don't report to you. You'll have AI and GRC tooling, including Vanta, to help you work efficiently.
What You Will Do
Compliance
Work with the Head of Risk and Compliance for scoping and timing, then work with our PMO and Compliance consultants to prepare for, schedule, evidence, and execute on the fieldwork and reporting phases of the SOC2 Type II and ISO 27001 Audits. You’ll have support as needed from other team members.
Cover HIPAA Audits (Security and Breach Notification Rules) as part of our SOC and ISO work.
Support FedRAMP program and other frameworks as needed by researching control requirements, gathering evidence, reviewing deliverables, or producing documentation.
Take on internal audit, assurance testing, and due diligence work, including M&A, when assigned.
Customer Trust
Own customer, partner, and prospect security questionnaires and due diligence requests. Answer accurately and within SLA, working with Product and Engineering and/or FedRAMP SMEs to confirm answers.
Take on the very complex questionnaires our GRC Analyst escalates, and help the analyst grow in GRC areas that are new to them.
Build and maintain our reusable answer library using a mix of AI-assisted, automated, and manual processes.
Remediation Follow Through
Drive remediation dates with Engineering for non-FedRAMP audit findings: set recommended timelines, track milestones, and follow up with control owners.
Escalate blockers on high-risk items to the Head of Risk and Compliance or the CISO, and hold control owners to deadlines through clear communication and data, without formal authority over their teams.
Policy and Governance
Own the upkeep of our information security policies, standards, and procedures: draft updates and align them with frameworks such as NIST SP 800-53/CSF, ISO 27001:2022, HIPAA, and SOC 2.
Work with policy owners, People Operations, and Legal to get changes reviewed, approved, published, and acknowledged.
Stay current on regulatory, customer, and threat landscape changes, and recommend policy updates before they become audit findings.
Team Coverage and Continuous Improvement
Back up teammates on vendor risk assessments, risk exception reviews, and the commercial Trust Center when an owner is out or the queue is heavy.
Help define and report KPIs and KRIs, and support the cyber risk register.
Help administer our GRC platform (Vanta) and find manual work to automate, such as evidence collection, control monitoring, and framework cross mapping.
Support our security awareness training program.
What You Will Bring (Required)
5+ years of experience in GRC, information security risk, compliance, or IT audit, including experience at a SaaS company.
A degree in Cybersecurity, or one of these certifications: CISSP, CRISC, CISM, or CISA.
SOC 2 Type II and ISO 27001 audit and attestation experience.
Clear written and verbal communication, with the ability to explain technical control details to engineers, business owners, and customers.
A track record of getting results through influence with engineers and other stakeholders who don't report to you.
Preferred Qualifications
Hands-on experience in at least four of these areas: security policy and standards; GRC operations; third party and vendor risk management; cyber and technology risk assessment and risk exceptions; risk registers and risk reporting; customer trust work (questionnaires, due diligence, Trust Center); running an audit or assessment; and security assurance (control testing and gap analysis).
Experience with FedRAMP, NIST 800-53, or other government compliance frameworks.
Hands-on configuration of a modern GRC platform such as Vanta, Drata, OneTrust, Archer, or ServiceNow.
Experience automating control monitoring and evidence collection (\"compliance as code\").
Experience answering customer security questionnaires at scale with AI-assisted tools.
GRC experience at a cybersecurity, identity, or infrastructure software company serving regulated industries.
Familiarity with AI governance frameworks such as ISO 42001 or NIST AI RMF.
Experience with M&A due diligence or IPO readiness, audit test plan development, quantitative cyber risk analysis, or business continuity, incident response, or continuous monitoring plans.
Success Measures (First Year)
In your first 90 days, you take over customer questionnaires, remediation tracking, and policy upkeep, and cross-train on vendor reassessments, with accurate, on-time work.
Coordinate preparation efforts for ISO 27001 Audit scheduled for February 2027.
Questionnaires in your scope are answered within SLA, accurately and without overstating our security posture.
Control owners consistently meet evidence and remediation deadlines without needing escalation.
Our policy set is current, approved, and ready for audit.
You deliver at least one measurable automation or process improvement that reduces manual work for the team.
You're a trusted backup across GRC areas, so the team can rebalance work when it needs to.
Additionally, this position requires the following:
• U.S. citizenship.
#LI-MR1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Location: Hybrid In-Office: Hoboken, NJ; Addison, TX; Phoenix, AZ; or Austin, TX
About the Role
We protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team runs the policy, risk, compliance, and customer trust programs that let security-conscious enterprises, regulated industries, and government customers adopt Semperis products with confidence.
As our Senior GRC Analyst, you'll own three core programs: SOC/ISO/HIPAA Audits, customer security questionnaires and upkeep of our security policies and standards. You'll also be the day-to-day point of contact for remediation follow through on audit findings, and you'll support our FedRAMP work on occasion during certification phases.
We're a small team, so you'll back up teammates on vendor risk, risk exceptions, and our Trust Center when the queue gets heavy, and you'll be the person our GRC Analyst turns to for very complex questionnaires. You'll run your programs independently, bring recommendations to the Head of Risk and Compliance on scoping, policy, and higher-risk decisions, and get results through influence rather than authority.
You'll succeed by being accurate, organized, and persuasive with engineers and business owners who don't report to you. You'll have AI and GRC tooling, including Vanta, to help you work efficiently.
What You Will Do
Compliance
Work with the Head of Risk and Compliance for scoping and timing, then work with our PMO and Compliance consultants to prepare for, schedule, evidence, and execute on the fieldwork and reporting phases of the SOC2 Type II and ISO 27001 Audits. You’ll have support as needed from other team members.
Cover HIPAA Audits (Security and Breach Notification Rules) as part of our SOC and ISO work.
Support FedRAMP program and other frameworks as needed by researching control requirements, gathering evidence, reviewing deliverables, or producing documentation.
Take on internal audit, assurance testing, and due diligence work, including M&A, when assigned.
Customer Trust
Own customer, partner, and prospect security questionnaires and due diligence requests. Answer accurately and within SLA, working with Product and Engineering and/or FedRAMP SMEs to confirm answers.
Take on the very complex questionnaires our GRC Analyst escalates, and help the analyst grow in GRC areas that are new to them.
Build and maintain our reusable answer library using a mix of AI-assisted, automated, and manual processes.
Remediation Follow Through
Drive remediation dates with Engineering for non-FedRAMP audit findings: set recommended timelines, track milestones, and follow up with control owners.
Escalate blockers on high-risk items to the Head of Risk and Compliance or the CISO, and hold control owners to deadlines through clear communication and data, without formal authority over their teams.
Policy and Governance
Own the upkeep of our information security policies, standards, and procedures: draft updates and align them with frameworks such as NIST SP 800-53/CSF, ISO 27001:2022, HIPAA, and SOC 2.
Work with policy owners, People Operations, and Legal to get changes reviewed, approved, published, and acknowledged.
Stay current on regulatory, customer, and threat landscape changes, and recommend policy updates before they become audit findings.
Team Coverage and Continuous Improvement
Back up teammates on vendor risk assessments, risk exception reviews, and the commercial Trust Center when an owner is out or the queue is heavy.
Help define and report KPIs and KRIs, and support the cyber risk register.
Help administer our GRC platform (Vanta) and find manual work to automate, such as evidence collection, control monitoring, and framework cross mapping.
Support our security awareness training program.
What You Will Bring (Required)
5+ years of experience in GRC, information security risk, compliance, or IT audit, including experience at a SaaS company.
A degree in Cybersecurity, or one of these certifications: CISSP, CRISC, CISM, or CISA.
SOC 2 Type II and ISO 27001 audit and attestation experience.
Clear written and verbal communication, with the ability to explain technical control details to engineers, business owners, and customers.
A track record of getting results through influence with engineers and other stakeholders who don't report to you.
Preferred Qualifications
Hands-on experience in at least four of these areas: security policy and standards; GRC operations; third party and vendor risk management; cyber and technology risk assessment and risk exceptions; risk registers and risk reporting; customer trust work (questionnaires, due diligence, Trust Center); running an audit or assessment; and security assurance (control testing and gap analysis).
Experience with FedRAMP, NIST 800-53, or other government compliance frameworks.
Hands-on configuration of a modern GRC platform such as Vanta, Drata, OneTrust, Archer, or ServiceNow.
Experience automating control monitoring and evidence collection (\"compliance as code\").
Experience answering customer security questionnaires at scale with AI-assisted tools.
GRC experience at a cybersecurity, identity, or infrastructure software company serving regulated industries.
Familiarity with AI governance frameworks such as ISO 42001 or NIST AI RMF.
Experience with M&A due diligence or IPO readiness, audit test plan development, quantitative cyber risk analysis, or business continuity, incident response, or continuous monitoring plans.
Success Measures (First Year)
In your first 90 days, you take over customer questionnaires, remediation tracking, and policy upkeep, and cross-train on vendor reassessments, with accurate, on-time work.
Coordinate preparation efforts for ISO 27001 Audit scheduled for February 2027.
Questionnaires in your scope are answered within SLA, accurately and without overstating our security posture.
Control owners consistently meet evidence and remediation deadlines without needing escalation.
Our policy set is current, approved, and ready for audit.
You deliver at least one measurable automation or process improvement that reduces manual work for the team.
You're a trusted backup across GRC areas, so the team can rebalance work when it needs to.
Additionally, this position requires the following:
• U.S. citizenship.
#LI-MR1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Semperis is looking for a passionate and results-driven Customer Success Manager to join our Americas team.
What you’ll be doing:
As a Customer Success Manager at Semperis, you will ensure your customers' success and satisfaction with our products and support them every step of the way. You will be an essential member of our Customer Success team, collaborating closely with cross-functional teams including Technical Delivery and Sales teams to maximize opportunities for our SMB customers and Semperis.
Our Customer Success Managers are strategic and empathetic communicators who can convey complex concepts in a clear and concise manner. Our CSM will build and nurture long-lasting relationships across multiple client accounts. Our CSM’s strengths include the ability to identify gaps in the product and internal operations and build effective and scalable solutions to address them. Our CSM will also onboard new customers, ensuring a smooth and successful implementation of our solutions.
You will be responsible for:
Designing success plans for a Book of Business of approximately 50 SMB customers throughout their lifecycle. From onboarding and implementation through upselling, cross-sell, and renewal, you will guide your customer down the path of success every step of the way to help them reach their business objectives and operational goals.
You will be empowered to achieve and report on customer health, satisfaction, retention, and growth targets.
Acting as the voice of the customer, gather insights to provide feedback to internal teams including our Product Development team. Collaborate on new developments to ensure the product suits our client’s needs.
Leading training sessions to ensure that the product is meeting user needs and is being used widely enough to have concrete impact on our customers' operations.
Monitoring record-keeping to ensure that relevant customer information is captured to enable informed, personalized customer interactions with Semperis Support, Customer Success (CS), Sales, etc.
Developing and execute programs for ongoing customer development (health checks, product upgrades, workshops, etc.)
Identifying potential customer references and assisting with development of customer case studies.
Gain and maintain an understanding of Semperis technology, products, and services.
In addition to managing an assigned customer segment, assist with development and enhancement of processes and systems for the overall Semperis CS program.
What you will bring to the table:
Technical & Cyber Security Skills
Hands-on product enablement experience with a security product vendor, including running product health checks, articulating the output with expertise, configuring or tuning alert and response rules, remediating Active Directory and Entra security posture vulnerabilities.
Understanding of security concepts (NIST IR process, MITRE Attack framework, APTs, etc.) and workflows, Active Directory and Entra ID vulnerabilities and attack patterns, IAM and Security team organization structures
Strong foundational knowledge of cyber security domains:
Network security, endpoint protection (EDR/XDR), cloud security (CSPM/CWPP), identity (IAM/SSO/MFA), SIEM, zero-trust, threat intelligence, etc.
Fundamental understanding of modern architectures: on-prem and cloud (AWS, Azure, GCP)
Familiarity with compliance frameworks (NIST CSF, CIS, ISO 27001, PCI-DSS, HIPAA, GDPR, SOC 2)
Customer-facing & Soft Skills
3+ years’ experience as a Customer Success Manager, technical account manager, or related customer-facing role in a Cybersecurity SaaS solutions company.
Executive presence & communication: can explain complex threats or product value to CISOs, CIOs, architects, and analysts in their language.
Storytelling with data: Turn telemetry, risk scores, and attack surface metrics into compelling business narratives.
Project/program management: Be in tune with customer onboarding, health checks, maturity roadmaps, and expansion opportunities.
Conflict resolution & expectation management during incidents or escalations
Consultative selling & value realization: Identify use cases that justify expansion, upsell & cross-sell modules, or multi-year renewals.
Business & Strategic Skills
Renewal & expansion forecasting (understand ARR, NRR, consumption metrics)
Ability to build and Execute Customer Success Plans / Joint Success Plans with Account owners (sales reps)
Risk identification (technical debt, low adoption, competing solutions) and mitigation planning (QBRs, escalation paths)
Competitive intelligence: Know how our product differentiates from the competition.
Preferences:
Experience with SFDC and Active Directory
#LI-KG1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
As a Product Support Team Lead at Semperis, you will play a critical leadership role within our Product Support organization, reporting directly to the Director of Support Engineering. In this role, you will lead, mentor, and develop a team of Product Support Engineers while serving as a senior escalation point for complex customer issues.
You will combine strong technical expertise with people leadership to ensure exceptional support experiences for our customers. You will drive operational excellence, oversee escalated cases, contribute to process improvements, and partner closely with cross-functional teams to support Semperis' identity security solutions.
The ideal candidate brings a deep technical background, knowledge of Active Directory and identity technologies, proven leadership experience, and a passion for helping both customers and team members succeed.
The success of the Team Lead will be measured through key performance indicators (KPIs), including but not limited to:
Average response and resolution times
Customer Satisfaction Score (CSAT)
Ticket backlog management and escalation handling
Case closure rates
Team performance, engagement, and retention
Lead, mentor, and manage a team of Product Support Engineers, fostering a collaborative, supportive, and growth-oriented environment.
Conduct regular performance reviews, provide constructive feedback, and create individualized development plans for team members.
Mentor, train, and onboard new support team personnel.
Promote knowledge sharing, lead technical training sessions, and support continuous learning across the team.
Ensure appropriate team coverage and effective prioritization of support activities.
Take initiative and anticipate the needs of customers, colleagues, and the business.
Serve as the primary escalation point for Product Support Engineers on complex technical issues and customer concerns.
Manage escalations with the flexibility to support urgent, high-visibility customer situations, including outside standard business hours when required.
Proactively oversee customer support queues, ensuring timely responses and adherence to SLAs.
Lead customer engagements to gather detailed information, troubleshoot issues, and identify potential product defects.
Provide expert-level product support, troubleshooting, and root cause analysis across the Semperis product portfolio.
Assist with major customer cases, ensuring effective communication, updates, and collaboration across teams.
Escalate critical issues to Support Management when response or resolution targets are at risk.
Act as a subject matter expert for Semperis products and related technologies.
Analyze logs, traces, diagnostic information, and performance data to resolve complex technical issues.
Execute and oversee product upgrades within customer production environments.
Participate in major incident reviews and postmortem discussions to identify root causes and prevent recurrence.
Ensure technical solutions are properly documented and maintained within knowledge base systems.
Participate in product design and product engagement reviews, advocating for supportability, usability, and customer experience improvements.
Evaluate emerging technologies and provide both tactical and strategic recommendations for the evolution of the support organization.
Continuously improve customer support workflows and processes to increase efficiency and meet support KPIs.
Ensure support cases meet quality standards through regular audits and spot checks.
Maintain detailed documentation of product defects and collaborate with Development and QA teams through the defect management lifecycle.
Ensure the team understands and follows established processes and procedures while actively contributing to process improvements.
Participate in projects and cross-functional meetings as a representative of the Support organization.
Collaborate closely with Engineering, Product Management, QA, and other teams to resolve customer issues and enhance product quality.
4+ years of experience in Product Support, including leadership or team management responsibilities.
Deep understanding of Semperis products and technologies.
Experience with Active Directory, Microsoft 365, Okta and identity and access management solutions.
Understanding of DNS, networking concepts, and security protocols.
Advanced PowerShell scripting skills for automation, diagnostics, and troubleshooting.
Experience supporting production software environments and resolving customer-impacting issues.
Excellent written and verbal communication skills with the ability to explain complex technical concepts to both technical and non-technical audiences.
Demonstrated leadership experience, including coaching, mentoring, and serving as an escalation point within a support organization.
Strong organizational skills with the ability to manage competing priorities while maintaining high customer satisfaction.
Experience working with cloud platforms such as Microsoft Azure, AWS, and Google Cloud Platform (GCP).
A proactive approach to learning new technologies and adapting to changing customer needs.
Strong analytical and problem-solving abilities, including the ability to define issues, collect data, identify root causes, and drive effective solutions.
Understanding of identity and access management (IAM), cybersecurity solutions, and the broader identity security market landscape.
Strong active listening skills, with the ability to understand customer challenges and build trust.
Ability to communicate complex technical concepts clearly and effectively to diverse audiences.
Strong interpersonal skills and the ability to work collaboratively across teams and functions.
Adaptability and flexibility when managing varied customer situations, business priorities, and technical challenges.
#LI-HA1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
As a Product Support Team Lead at Semperis, you will play a critical leadership role within our Product Support organization, reporting directly to the Director of Support Engineering. In this role, you will lead, mentor, and develop a team of Product Support Engineers while serving as a senior escalation point for complex customer issues.
You will combine strong technical expertise with people leadership to ensure exceptional support experiences for our customers. You will drive operational excellence, oversee escalated cases, contribute to process improvements, and partner closely with cross-functional teams to support Semperis' identity security solutions.
The ideal candidate brings a deep technical background, knowledge of Active Directory and identity technologies, proven leadership experience, and a passion for helping both customers and team members succeed.
The success of the Team Lead will be measured through key performance indicators (KPIs), including but not limited to:
Average response and resolution times
Customer Satisfaction Score (CSAT)
Ticket backlog management and escalation handling
Case closure rates
Team performance, engagement, and retention
Lead, mentor, and manage a team of Product Support Engineers, fostering a collaborative, supportive, and growth-oriented environment.
Conduct regular performance reviews, provide constructive feedback, and create individualized development plans for team members.
Mentor, train, and onboard new support team personnel.
Promote knowledge sharing, lead technical training sessions, and support continuous learning across the team.
Ensure appropriate team coverage and effective prioritization of support activities.
Take initiative and anticipate the needs of customers, colleagues, and the business.
Serve as the primary escalation point for Product Support Engineers on complex technical issues and customer concerns.
Manage escalations with the flexibility to support urgent, high-visibility customer situations, including outside standard business hours when required.
Proactively oversee customer support queues, ensuring timely responses and adherence to SLAs.
Lead customer engagements to gather detailed information, troubleshoot issues, and identify potential product defects.
Provide expert-level product support, troubleshooting, and root cause analysis across the Semperis product portfolio.
Assist with major customer cases, ensuring effective communication, updates, and collaboration across teams.
Escalate critical issues to Support Management when response or resolution targets are at risk.
Act as a subject matter expert for Semperis products and related technologies.
Analyze logs, traces, diagnostic information, and performance data to resolve complex technical issues.
Execute and oversee product upgrades within customer production environments.
Participate in major incident reviews and postmortem discussions to identify root causes and prevent recurrence.
Ensure technical solutions are properly documented and maintained within knowledge base systems.
Participate in product design and product engagement reviews, advocating for supportability, usability, and customer experience improvements.
Evaluate emerging technologies and provide both tactical and strategic recommendations for the evolution of the support organization.
Continuously improve customer support workflows and processes to increase efficiency and meet support KPIs.
Ensure support cases meet quality standards through regular audits and spot checks.
Maintain detailed documentation of product defects and collaborate with Development and QA teams through the defect management lifecycle.
Ensure the team understands and follows established processes and procedures while actively contributing to process improvements.
Participate in projects and cross-functional meetings as a representative of the Support organization.
Collaborate closely with Engineering, Product Management, QA, and other teams to resolve customer issues and enhance product quality.
4+ years of experience in Product Support, including leadership or team management responsibilities.
Deep understanding of Semperis products and technologies.
Strong experience with Active Directory, Microsoft 365, and identity and access management solutions.
Solid understanding of DNS, networking concepts, and security protocols.
Advanced PowerShell scripting skills for automation, diagnostics, and troubleshooting.
Experience supporting production software environments and resolving customer-impacting issues.
Excellent written and verbal communication skills with the ability to explain complex technical concepts to both technical and non-technical audiences.
Demonstrated leadership experience, including coaching, mentoring, and serving as an escalation point within a support organization.
Strong organizational skills with the ability to manage competing priorities while maintaining high customer satisfaction.
Experience working with cloud platforms such as Microsoft Azure, AWS, and Google Cloud Platform (GCP).
A proactive approach to learning new technologies and adapting to changing customer needs.
Strong analytical and problem-solving abilities, including the ability to define issues, collect data, identify root causes, and drive effective solutions.
Understanding of identity and access management (IAM), cybersecurity solutions, and the broader identity security market landscape.
Strong active listening skills, with the ability to understand customer challenges and build trust.
Ability to communicate complex technical concepts clearly and effectively to diverse audiences.
Strong interpersonal skills and the ability to work collaboratively across teams and functions.
Adaptability and flexibility when managing varied customer situations, business priorities, and technical challenges.
#LI-HA1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
What we are looking for:
Semperis is looking for a passionate and results-driven Enterprise Customer Success Manager to join our EMEA team.
What you will be doing:
As an Enterprise Customer Success Manager at Semperis, you will ensure your customers' success and satisfaction with our products and support them every step of the way. You will be an essential member of our Customer Success team, collaborating closely with cross-functional teams including Technical Delivery and Sales teams to maximise opportunities for our Enterprise Business customers and Semperis.
Our Customer Success Managers are strategic and empathetic communicators who can convey complex concepts in a clear and concise manner. Our CSM will build and nurture long-lasting relationships across multiple client accounts. Our CSM’s strengths include the ability to identify gaps in the product and internal operations and build effective and scalable solutions to address them. Our CSM will also onboard new customers, ensuring a smooth and successful implementation of our solutions.
You will be responsible for:
Design a success plan for a Book of Business of strategic customers throughout their lifecycle. From onboarding and implementation through upsell, cross-sell, and renewal, you will guide your customer down the path of success every step of the way to reach their business objectives and operational goals
You will be empowered to achieve and report on customer health, satisfaction, retention, and growth targets
Act as the voice of the customer, gather insights to provide feedback to internal teams including our Product Development team. Collaborate on new developments to ensure the product suits our client’s needs
Lead training sessions to ensure that the product is meeting user needs and is being used widely enough to have concrete impact on our customers' operations
Monitor record-keeping to ensure that relevant customer information is captured to enable informed, personalised customer interactions with Semperis Support, Customer Success (CS), Sales, etc
Develop and execute programs for ongoing customer development (health checks, product upgrades, workshops, etc.)
Identify potential customer references and assist with development of customer case studies
Gain and maintain an understanding of Semperis technology, products, and services
In addition to managing an assigned customer segment, assist with development and enhancement of processes and systems for the overall Semperis CS program
What you will bring to the table:
Technical & Cyber Security Skills
Hands-on product enablement experience with a security product vendor, including running product health checks, articulating the output with expertise, configuring or tuning alert and response rules, remediating Active Directory and Entra security posture vulnerabilities
Understanding of security concepts (NIST IR process, MITRE Attack framework, APTs, etc.) and workflows, Active Directory and Entra ID vulnerabilities and attack patterns, IAM and Security team organisation structures
Strong foundational knowledge of cyber security domains:
Network security, endpoint protection (EDR/XDR), cloud security (CSPM/CWPP), identity (IAM/SSO/MFA), SIEM, zero-trust, threat intelligence, etc
Fundamental understanding of modern architectures: on-prem and cloud (AWS, Azure, GCP)
Familiarity with compliance frameworks (NIST CSF, CIS, ISO 27001, PCI-DSS, HIPAA, GDPR, SOC 2)
Customer-facing & Soft Skills -
5+ years’ experience as a Customer Success Manager, technical account manager, or related customer-facing role in a Cybersecurity SaaS solutions company
Executive presence & communication: can explain complex threats or product value to CISOs, CIOs, architects, and analysts in their language
Storytelling with data: Turn telemetry, risk scores, and attack surface metrics into compelling business narratives
Project/program management: Be in tune with customer onboarding, health checks, maturity roadmaps, and expansion opportunities
Conflict resolution & expectation management during incidents or escalations.
Consultative selling & value realization: Identify use cases that justify expansion, upsell & cross-sell modules, or multi-year renewals
Business & Strategic Skills:
Renewal & expansion forecasting (understand ARR, NRR, consumption metrics)
Ability to build and Execute Customer Success Plans / Joint Success Plans with Account owners (sales reps)
Risk identification (technical debt, low adoption, competing solutions) and mitigation planning (QBRs, escalation paths)
Competitive intelligence: Know how your product differentiates from the competition
Preferences:
Experience with SFDC and Active Directory
Fluent German and English language skills are required
#LI-LP1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
We’re looking for an HRIS Analyst to join our People Operations team.
What You’ll Be Doing
As our HRIS Analyst, you’ll turn People Operations requests into working Workday reports, data loads, and fixes, and you’ll keep our employee data clean and accurate. Our Workday setup is still maturing, so you’ll often find problems no one has documented yet. When the same issue keeps coming back, you’ll find the root cause and fix it at the source instead of fixing it by hand again.
You’ll partner closely with People Operations, HRBPs, Talent Operations, Compensation, and our Workday specialist.
This is a hybrid role based in Toronto, Hoboken, or Dallas, with an expectation of working in the office two days per week.
Your Key Responsibilities
Turn report and data requests into Workday reports and dashboards. Work out what data and logic the requester needs, build it, and get it right the first time. Keep recurring reports ready so People Operations and company leaders aren’t waiting on data.
Run the audit and cleanup of our Workday data, including records still held in BambooHR. Build, load, and check EIB data loads to correct records at scale, then keep the data accurate with regular data quality audits.
Find the root cause of recurring data errors and fix them at the source, using reports, EIB data loads, simple calculated fields, or a recommended process change, to cut manual work.
Test Workday changes and releases before they go live, and check the data afterward.
Work the People Operations request queue (tickets and email) and see each request through, including employee data changes, job changes and promotions, position management, internal mobility, and selected onboarding steps. Check what a change touches before you make it. For example, a title change request may really be a job change, a promotion, a new manager or cost center, or a job profile change that affects everyone who shares that profile.
Answer Workday questions from HRBPs and People Operations partners, and fix transaction errors.
Bring complex configuration, security, and integration needs to our Workday specialist with the problem clearly defined.
What You Bring to the Table
At least 2 years of hands-on Workday HCM experience in an HRIS Analyst, HRIS Administrator, or similar role, with direct access to make changes in the system.
Hands-on experience building custom Workday reports from a business request, and building, loading, and checking EIB data loads yourself.
Experience auditing and cleaning up employee data.
A root cause mindset: you find out why a request is being made and what it affects before you act.
Ability to work a busy request queue, set priorities, and follow through.
Strong Excel skills for reviewing and preparing data.
Strong attention to detail and commitment to data accuracy and confidentiality.
Customer service mindset with clear, responsive communication.
Experience working in a global or multi-location organization.
Bonus Points
Experience at a company of roughly 1,000 to 5,000 employees, where you worked across many parts of Workday rather than one narrow area.
Experience building simple calculated fields or business process changes in Workday.
Experience with Workday security, integrations, or data migrations.
Workday Pro certification or another relevant HRIS certification.
*No sponsorship will be provided for this role. Candidate must be eligible to work in the country in which you apply
#LI-AO1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Location: Israel – Onsite Ramat Gan- 5 days per week
About the Role
We are looking for a highly organized and resourceful Office Manager to oversee all aspects of office operations and logistics. You will manage vendor relationships, facilities, supplies, employee services, and ensure that the office runs efficiently across multiple work floors, common areas, and amenities.
This role is ideal for someone who enjoys solving operational challenges, thrives in a fast-paced international tech environment, and can balance hands-on problem solving with strategic office management.
What You’ll Do
Oversee day-to-day office operations, including supplies, equipment, and catering
Manage vendor relationships, contracts, invoices, and service providers
Coordinate maintenance, cleaning, renovations, and upgrades across three office floors, cafeteria, gym, game room, and rooftop
Manage seating plans, workspace logistics, and parking assignments
Ensure smooth functioning of IT/AV in meeting rooms (in collaboration with IT)
Supervise and manage a small team of office staff
Track and manage office budgets, petty cash, and supplier invoices (liaise with Finance)
Administer employee services: meal cards, company car leasing contracts, parking, and onboarding/offboarding processes
Maintain internal communication channels (e.g., WhatsApp, Signal)
Serve as main liaison with building management and local authorities
Collaborate with HR, IT, and Finance departments to support company-wide initiatives
What We’re Looking For
Experience: 2–4 years as an Office Manager, Facilities Manager, or similar role in a high-tech / startup environment
Languages: Fluent in Hebrew and English (written & spoken)
Tech Skills: Proficiency with MS Office; familiarity with tools like Monday.com, DocuSign; Coupa or Mesh experience a plus
Service-minded, highly organized, solutions-oriented, and resourceful
Energetic, collaborative, and adaptable to fast-changing priorities
#LI-TI1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
What we are looking for:
We are seeking a Director of Customer Success to lead execution and customer outcomes across the Western US. This is a regional people-leadership role, not an individual customer book-of-business role. You will lead and develop Customer Success Managers as applicable to the coverage model, and ensure the team consistently drives customer value, adoption, retention, and advocacy.
You will translate Semperis’s Customer Success strategy into strong day-to-day regional execution: building team capability, coaching customer strategy, inspecting portfolio health and renewal readiness, and coordinating with Sales, Renewals, Technical Delivery, Product, Support, and other partners. You will bring credibility in cybersecurity and the ability to connect identity-security outcomes to customer and business value.
What you will be doing:
As a Director of Customer Success at Semperis, you will help customers strengthen and recover their critical identity systems by building a team that delivers proactive, measurable value throughout the customer lifecycle. You will lead through people, establish a high bar for execution, and make sure customer insights and risks translate into clear action.
You will be responsible for:
Regional execution and portfolio outcomes
Own the operating plan for your assigned region, translating Customer Success priorities into clear team goals, coverage expectations, and execution rhythms
Lead team performance against gross retention (GRR), renewal attainment, portfolio health, success-plan execution, customer advocacy, and qualified customer success leads (CSQLs) in partnership with Sales
Review regional customer coverage and portfolio performance; identify gaps in capacity, focus, and execution, and recommend actions to the regional VP/AVP
Maintain a reliable view of account health, renewal readiness, customer sentiment, adoption, and expansion readiness across the portfolio
People leadership, coaching, and talent development
Hire, onboard, coach, and develop a high-performing team; set clear expectations and manage performance consistently
Coach CSMs to move from reactive account coverage to proactive adoption, value realization, risk mitigation, and executive engagement
Establish a regular coaching and inspection cadence, including one-to-ones, portfolio reviews, calibration, and development planning
Build team capability and succession depth through feedback, stretch assignments, knowledge sharing, and career development
Address performance gaps promptly and fairly, recognize strong performance, and foster a culture of accountability, collaboration, and continuous learning
Customer value, adoption, and success planning
Inspect the quality and execution of success plans, ensuring customer business and security outcomes, use cases, milestones, owners, and value measures are clear
Coach teams to use customer telemetry, health indicators, deployment context, and product usage to identify adoption gaps and demonstrate value
Drive disciplined adoption of relevant Semperis use cases across the portfolio, including DSP posture reviews and hardening, ADFR recovery testing, DRET/Lightning detection and incident workflows, and maintaining current product versions
Ensure QBRs/EBRs and executive engagements connect technical progress, such as posture improvement and recovery readiness, to customer security and business priorities
Partner with Technical Delivery and other teams to keep deployment responsibilities distinct from ongoing adoption and value realization
Renewal readiness, risk, and expansion partnership
Inspect red/yellow accounts, at-risk renewals, and expansion-ready customers; ensure owners, next steps, mitigation plans, and leadership involvement are clear and documented
Coach teams to surface risk early, coordinate save strategies, and engage Sales, Renewals, Support, Product, and Technical Delivery as appropriate
Partner with Sales and Renewals on renewal readiness, account strategy, and expansion opportunities; ensure CSQLs are grounded in validated customer needs and followed through
Support major customer escalations within the region, aligning the right internal stakeholders and maintaining clear customer communication and accountability
Operating discipline and cross-functional collaboration
Establish and maintain consistent regional routines for portfolio reviews, success-plan inspection, QBR quality, renewal readiness, escalation follow-through, and team development
Use Salesforce (SFDC), TaskRay, and relevant customer-success dashboards to maintain accurate account context, health, risk, success-plan, renewal, and next-step information
Partner with CS Operations and regional leadership to improve visibility, data quality, playbooks, and repeatable customer-success practices
Represent the regional Customer Success team in relevant operating, product, and go-to-market forums; bring customer feedback and field learnings to internal partners
Collaborate effectively across Sales, Renewals, Technical Delivery, Support, Product, Security, and Marketing to improve customer outcomes and the end-to-end customer experience
What you’ll bring to the table:
Required experience and skills
3+ years leading and developing high-performing Customer Success, Technical Account Management, Account Management, or related post-sale teams; experience in B2B SaaS, cybersecurity, or infrastructure software
A track record of improving team execution and customer outcomes across retention, renewal readiness, adoption, customer health, and value realization
Experience coaching teams that manage complex enterprise customers and multi-stakeholder program
Strong cybersecurity product or services experience and the credibility to engage with CISOs, CIOs, security operations leaders, IAM leaders, architects, and technical champions
Ability to explain identity-security concepts and connect customer outcomes to business value. Familiarity with Active Directory, Entra ID, identity security, incident response, and cyber-resilience concepts is highly relevant
Demonstrated skill in customer-risk identification, escalation leadership, renewal planning, and cross-functional problem solving
Strong people-leadership skills, including hiring, performance management, coaching, talent development, and building a healthy team culture
Data-informed operating skills: able to use portfolio dashboards, customer health signals, adoption measures, and CRM/CS tooling to set priorities and improve execution
Excellent written and verbal communication, executive presence, sound judgment, and ability to influence across teams in a global, distributed organization
Preferred qualifications
Experience in identity security, Active Directory/Entra ID, cyber recovery, security operations, or enterprise infrastructure
Experience with Salesforce, TaskRay, or comparable CRM and Customer Success platforms
Familiarity with customer-success measures and processes such as GRR, NRR, CSQLs, success plans, QBRs/EBRs, health scoring, and renewal forecasting
Relevant cybersecurity or customer-success certifications (for example, CISSP, CISM, CCSP, or equivalent)
Prior experience in professional services, solutions engineering, technical delivery, security engineering, or incident response
How success will be measured
Team GRR and renewal attainment
Improvement in portfolio health and timely intervention on at-risk accounts
Success-plan adoption, quality, and execution across the team
CSQL creation and conversion support in partnership with Sales
Customer adoption and demonstrated value realization across relevant use cases
Team productivity, coaching cadence, performance improvement, talent retention, and bench development
Quality and consistency of QBRs/EBRs, renewal readiness, customer-risk management, and operating data
#LI-LP1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Location: Hybrid In-Office: Hoboken, NJ; Addison, TX; Phoenix, AZ; or Austin, TX
We protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team is the engine behind that trust, running the certification and audit programs that let security-conscious enterprises, regulated industries, and government customers confidently adopt our cloud products.
As the designated Information System Security Officer (ISSO), you will lead and execute day-to-day FedRAMP operational work at Semperis. Your role will define and document the certification boundary, specify and deploy the mandatory Key Security Indicators (KSIs), and deliver the automated evidence pipeline, FedRAMP Trust Center, and Security Inbox that FedRAMP 20x requires.
This is a hands-on, highly technical GRC role for someone who can guide how Semperis meets FedRAMP requirements and get into the details of continuous assurance automation. You will guide Semperis’s interpretation of each FedRAMP requirement and outline the implementation details directly to Semperis leadership, Security Assessors, and FedRAMP reviewers.
The role reports to the Head of Risk and Compliance, who serves as the FedRAMP Information System Security Manager (ISSM). You will work very closely with Security Engineering, Product/Engineering leadership, and Sales Government Solutions, and will be relied upon as the company’s day-to-day FedRAMP 20x subject matter expert.
In addition to FedRAMP responsibilities, you may support other Governance, Risk, Compliance, and Trust initiatives and certifications as needed to advance and mature Semperis’s GRC capabilities.
What you Will Do
FedRAMP Certification & Governance
Mobilize the FedRAMP 20x Program for in-scope product(s): guide the project charter, establish governance and reporting cadence, develop the stakeholder RACI, and work with project management to outline a viable work plan.
Work with the FedRAMP ISSM to propose staffing of required FedRAMP roles for the certification project.
Deliver a signed charter and a published work plan tracked against internal planning gates (executive go-decision, security engineering work, listing-readiness) so that no workstream is unowned.
Establish the requirements for expanded use of our GRC system for Trust Center, controls mapping, evidence collection, OSCAL outputs, and associated risk management needs.
FedRAMP Certification & Continuous Compliance
Document the Cloud Service Offering (CSO) for 20x certification, including the production environment, data plane and data flows, management plane, security controls plane, and in-scope supporting services. As applicable, reconcile the proposed FedRAMP boundary against the most recent SOC 2 report’s scope.
Complete gap assessment(s) and build capability to deliver all mandatory 20x KSIs, ensuring each has a correctly defined measure, an authoritative evidence source, an accountable owner, and a documented “Meets” status.
Design and build the FedRAMP Trust Center, Security Inbox, and a machine-readable KSI evidence pipeline, normalizing signals from CSPM, IAM, SIEM, CI/CD, and vulnerability-scanning tools so certification data is generated from live systems rather than manually assembled spreadsheets.
Partner with Product, Engineering, and Security leadership to embed FedRAMP controls directly into the SDLC and cloud infrastructure design, establishing control requirements, validating designs, and setting testable success criteria for “compliance as code” workstreams.
Deliver the FedRAMP Marketplace listing and the full 20x Certification Package, carrying it through the FedRAMP PMO’s review process to FedRAMP certification.
Operationalize the post-certification maintenance program: recurring KSI reviews, POA&M-style remediation tracking, and the required ongoing reporting cycle to FedRAMP (certification data changes, accepted vulnerabilities, transformative changes, agencies using the service, reportable incidents). Assess the security impact of proposed changes and prepare significant change submissions for the ISSM’s sign off.
Procure or develop and deliver annual and role-based training in accordance with FedRAMP requirements and manage the associated records and compliance activities.
Ensure implementation of all required non-technical controls, and manage day to day 3PAO, advisory, and accelerator vendor relationships as the program moves beyond Class A.
Drive timely remediation of risks and control gaps surfaced through audits, vulnerability scans, and penetration tests; translate technical findings into business-risk context for internal executives and (where applicable) external parties; bring risk acceptance proposals to the ISSM; escalate high-risk blockers to the Head of Risk and Compliance and/or CISO.
Define and track Key Security Indicators (KSIs) and Key Performance Indicators (KPIs) for the program, and support the Head of Risk and Compliance on related Key Risk Indicators (KRIs).
Support other certifications on the roadmap, such as GovRAMP, HIPAA, and CJIS, and lead the workstreams assigned to you.
Build the data-backed analysis behind the recommendation on whether and when to pursue higher level certification(s), grounded in Year 1 pipeline, conversion, and demand-signal data, including staffing, GovCloud, and cost implications, delivered in time to inform executive and board budget planning.
Security, Privacy and Reporting Responsibilities
Safeguard the confidentiality, integrity, and availability of federal information and systems within the authorization boundary and protect from unauthorized access, use, disclosure, or misuse; report any instance of unauthorized access, use, or misuse through required channels.
Comply with and help enforce personnel-security policies and procedures and acceptable-use/rules-of-behavior requirements for personnel in trusted roles.
Report insider-threat indicators and security/suitability concerns promptly through designated channels; support insider-threat program requirements.
Document and report security incidents within required timeframes.
Support internal and external security assessments, audits, and agency reviews
What You Will Bring (Required)
6+ years of experience in GRC, information security compliance, or IT audit, including hands-on FedRAMP ISSO experience through at least one full Rev 5 authorization (typically about 3 years) at a SaaS or cloud software company.
At least one of the following certifications: CRISC, CISM, CISA, CISSP, or an equivalent recognized security, risk, or audit management credential.
Direct implementation of NIST SP 800-53 controls within a FedRAMP authorization. If you have one full authorization behind you, some FedRAMP 20x exposure is also expected.
Working fluency across cloud (Azure, AWS) and platform security domains: IAM, encryption, vulnerability management, SIEM, and cloud configuration.
Ability to work independently as an individual contributor: owning your deliverables, setting priorities for your workstreams, and knowing when to act on your own and when to bring an issue to the ISSM.
Strong \"manage by influence\" track record: experience driving engineers, product managers, and other non-reporting stakeholders to deliver evidence, remediate findings, and meet audit deadlines.
Direct experience managing external auditors, assessors, or certification bodies through full audit cycles.
Preferred Qualifications
Experience with or exposure to FedRAMP 20x KSIs (not just Rev 5 process), and familiarity with higher-tier FedRAMP certifications (Moderate and High).
Experience with related frameworks: DoD Impact Levels, GovRAMP/StateRAMP, CMMC, NIST 800-171, and CUI handling requirements.
Familiarity with GRC and compliance automation tooling (for example, Vanta or comparable platforms), AI tools to generate automated workflows and deliverables, and Lucid or Visio to produce and maintain system diagrams.
Experience designing evidence collection and validation architecture that turns data and signals from CSPM, IAM, SIEM, CI/CD, and vulnerability scanning tools into machine readable (OSCAL) compliance evidence, and partnering with the engineers who build the automation.
Success Measures
FedRAMP certification is achieved and maintained on schedule with no high or critical assessment findings.
Automated continuous KSI reporting via the FedRAMP Trust Center.
Cross-functional control owners consistently meet remediation and evidence deadlines without requiring escalation.
Customer Trust support commitments are met on time whenever called upon.
Special Security and Privacy Requirements
This position carries special Security and Privacy Responsibilities for protecting U.S. Government interests:
Know, acknowledge, and follow system-specific security policies and procedures;
Protect government data and individual privacy per requirements and regulations;
Perform ongoing activities in compliance with service and contractual obligations;
Participate in role-based training, completing assignments on a timely basis;
Report security issues promptly, and aid security investigations when needed;
Support controlled changes and vulnerability remediation activities; and
Work collaboratively in designing, implementing, assessing or enhancing system-specific security and privacy controls.
Additionally, this position requires the following:
• U.S. citizenship.
• Residency within the contiguous United States (within distance of Semperis TX, NJ offices); and
• Willingness to undergo a Single Source or similar Background Investigation if required.
Position Risk Designation:
The selected incumbent may be subject to additional background checks with periodic re-screening as noted below:
Position Risk Designation: Non-Sensitive, Low Risk, Tier 1
Incumbents with certain access to U.S. Government data may be required to complete Standard Form 85 and undergo a Tier 1 Investigation (T1) for non-sensitive positions of Low Risk. (Baseline screening; formerly National Agency Check and Inquiries (NACI)).
#LI-MR1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
We are seeking an experienced Senior C++ Software Engineer with strong
system-level programming expertise and advanced troubleshooting capabilities.
The ideal candidate will have a deep knowledge of Windows internals and be
passionate about solving complex technical challenges.
Key Responsibilities:
Design and implement high-performance C++ applications while
maintaining code quality and system stability
Develop and maintain user-mode components that are injected into sensitive Windows processes and intercept system APIs
Perform advanced crash dump analysis and BSOD investigations
Develop and maintain components that work with Windows security protocols
Collaborate with cross-functional teams to diagnose and resolve
critical technical issues
Required Qualifications:
Bachelor's degree in Computer Science, Software Engineering, or
related field
7+ years of professional experience in C++ development with demonstrated senior-level expertise
Expert-level knowledge of Windows internals and system
architecture
Hands-on experience with DLL injection and API hooking (e.g., Microsoft Detours, MinHook) in production code
Advanced proficiency in WinDbg for crash dump analysis,
including:
Strong understanding of x64 architecture
Extensive experience with WIN32 API
Ability to analyze and resolve BSOD issues
knowledge of Windows Authentication Architecture:
SSPI
Kerberos protocol implementation
LDAP protocol and directory services
Extensive experience with: RPC, DCOM
Strong understanding of memory management, thread
synchronization, and system resource optimization
#LI-TI1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Location: Hybrid In-Office: Hoboken, NJ; Addison, TX; Phoenix, AZ; or Austin, TX
We protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team is the engine behind that trust, running the certification and audit programs that let security-conscious enterprises, regulated industries, and government customers confidently adopt our cloud products.
As the designated Information System Security Officer (ISSO), you will lead and execute day-to-day FedRAMP operational work at Semperis. Your role will define and document the certification boundary, specify and deploy the mandatory Key Security Indicators (KSIs), and deliver the automated evidence pipeline, FedRAMP Trust Center, and Security Inbox that FedRAMP 20x requires.
This is a hands-on, highly technical GRC role for someone who can guide how Semperis meets FedRAMP requirements and get into the details of continuous assurance automation. You will guide Semperis’s interpretation of each FedRAMP requirement and outline the implementation details directly to Semperis leadership, Security Assessors, and FedRAMP reviewers.
The role reports to the Head of Risk and Compliance, who serves as the FedRAMP Information System Security Manager (ISSM). You will work very closely with Security Engineering, Product/Engineering leadership, and Sales Government Solutions, and will be relied upon as the company’s day-to-day FedRAMP 20x subject matter expert.
In addition to FedRAMP responsibilities, you may support other Governance, Risk, Compliance, and Trust initiatives and certifications as needed to advance and mature Semperis’s GRC capabilities.
What you Will Do
FedRAMP Certification & Governance
Mobilize the FedRAMP 20x Program for in-scope product(s): guide the project charter, establish governance and reporting cadence, develop the stakeholder RACI, and work with project management to outline a viable work plan.
Work with the FedRAMP ISSM to propose staffing of required FedRAMP roles for the certification project.
Deliver a signed charter and a published work plan tracked against internal planning gates (executive go-decision, security engineering work, listing-readiness) so that no workstream is unowned.
Establish the requirements for expanded use of our GRC system for Trust Center, controls mapping, evidence collection, OSCAL outputs, and associated risk management needs.
FedRAMP Certification & Continuous Compliance
Document the Cloud Service Offering (CSO) for 20x certification, including the production environment, data plane and data flows, management plane, security controls plane, and in-scope supporting services. As applicable, reconcile the proposed FedRAMP boundary against the most recent SOC 2 report’s scope.
Complete gap assessment(s) and build capability to deliver all mandatory 20x KSIs, ensuring each has a correctly defined measure, an authoritative evidence source, an accountable owner, and a documented “Meets” status.
Design and build the FedRAMP Trust Center, Security Inbox, and a machine-readable KSI evidence pipeline, normalizing signals from CSPM, IAM, SIEM, CI/CD, and vulnerability-scanning tools so certification data is generated from live systems rather than manually assembled spreadsheets.
Partner with Product, Engineering, and Security leadership to embed FedRAMP controls directly into the SDLC and cloud infrastructure design, establishing control requirements, validating designs, and setting testable success criteria for “compliance as code” workstreams.
Deliver the FedRAMP Marketplace listing and the full 20x Certification Package, carrying it through the FedRAMP PMO’s review process to FedRAMP certification.
Operationalize the post-certification maintenance program: recurring KSI reviews, POA&M-style remediation tracking, and the required ongoing reporting cycle to FedRAMP (certification data changes, accepted vulnerabilities, transformative changes, agencies using the service, reportable incidents). Assess the security impact of proposed changes and prepare significant change submissions for the ISSM’s sign off.
Procure or develop and deliver annual and role-based training in accordance with FedRAMP requirements and manage the associated records and compliance activities.
Ensure implementation of all required non-technical controls, and manage day to day 3PAO, advisory, and accelerator vendor relationships as the program moves beyond Class A.
Drive timely remediation of risks and control gaps surfaced through audits, vulnerability scans, and penetration tests; translate technical findings into business-risk context for internal executives and (where applicable) external parties; bring risk acceptance proposals to the ISSM; escalate high-risk blockers to the Head of Risk and Compliance and/or CISO.
Define and track Key Security Indicators (KSIs) and Key Performance Indicators (KPIs) for the program, and support the Head of Risk and Compliance on related Key Risk Indicators (KRIs).
Support other certifications on the roadmap, such as GovRAMP, HIPAA, and CJIS, and lead the workstreams assigned to you.
Build the data-backed analysis behind the recommendation on whether and when to pursue higher level certification(s), grounded in Year 1 pipeline, conversion, and demand-signal data, including staffing, GovCloud, and cost implications, delivered in time to inform executive and board budget planning.
Security, Privacy and Reporting Responsibilities
Safeguard the confidentiality, integrity, and availability of federal information and systems within the authorization boundary and protect from unauthorized access, use, disclosure, or misuse; report any instance of unauthorized access, use, or misuse through required channels.
Comply with and help enforce personnel-security policies and procedures and acceptable-use/rules-of-behavior requirements for personnel in trusted roles.
Report insider-threat indicators and security/suitability concerns promptly through designated channels; support insider-threat program requirements.
Document and report security incidents within required timeframes.
Support internal and external security assessments, audits, and agency reviews
What You Will Bring (Required)
6+ years of experience in GRC, information security compliance, or IT audit, including hands-on FedRAMP ISSO experience through at least one full Rev 5 authorization (typically about 3 years) at a SaaS or cloud software company.
At least one of the following certifications: CRISC, CISM, CISA, CISSP, or an equivalent recognized security, risk, or audit management credential.
Direct implementation of NIST SP 800-53 controls within a FedRAMP authorization. If you have one full authorization behind you, some FedRAMP 20x exposure is also expected.
Working fluency across cloud (Azure, AWS) and platform security domains: IAM, encryption, vulnerability management, SIEM, and cloud configuration.
Ability to work independently as an individual contributor: owning your deliverables, setting priorities for your workstreams, and knowing when to act on your own and when to bring an issue to the ISSM.
Strong \"manage by influence\" track record: experience driving engineers, product managers, and other non-reporting stakeholders to deliver evidence, remediate findings, and meet audit deadlines.
Direct experience managing external auditors, assessors, or certification bodies through full audit cycles.
Preferred Qualifications
Experience with or exposure to FedRAMP 20x KSIs (not just Rev 5 process), and familiarity with higher-tier FedRAMP certifications (Moderate and High).
Experience with related frameworks: DoD Impact Levels, GovRAMP/StateRAMP, CMMC, NIST 800-171, and CUI handling requirements.
Familiarity with GRC and compliance automation tooling (for example, Vanta or comparable platforms), AI tools to generate automated workflows and deliverables, and Lucid or Visio to produce and maintain system diagrams.
Experience designing evidence collection and validation architecture that turns data and signals from CSPM, IAM, SIEM, CI/CD, and vulnerability scanning tools into machine readable (OSCAL) compliance evidence, and partnering with the engineers who build the automation.
Success Measures
FedRAMP certification is achieved and maintained on schedule with no high or critical assessment findings.
Automated continuous KSI reporting via the FedRAMP Trust Center.
Cross-functional control owners consistently meet remediation and evidence deadlines without requiring escalation.
Customer Trust support commitments are met on time whenever called upon.
Special Security and Privacy Requirements
This position carries special Security and Privacy Responsibilities for protecting U.S. Government interests:
Know, acknowledge, and follow system-specific security policies and procedures;
Protect government data and individual privacy per requirements and regulations;
Perform ongoing activities in compliance with service and contractual obligations;
Participate in role-based training, completing assignments on a timely basis;
Report security issues promptly, and aid security investigations when needed;
Support controlled changes and vulnerability remediation activities; and
Work collaboratively in designing, implementing, assessing or enhancing system-specific security and privacy controls.
Additionally, this position requires the following:
• U.S. citizenship.
• Residency within the contiguous United States (within distance of Semperis TX, NJ offices); and
• Willingness to undergo a Single Source or similar Background Investigation if required.
Position Risk Designation:
The selected incumbent may be subject to additional background checks with periodic re-screening as noted below:
Position Risk Designation: Non-Sensitive, Low Risk, Tier 1
Incumbents with certain access to U.S. Government data may be required to complete Standard Form 85 and undergo a Tier 1 Investigation (T1) for non-sensitive positions of Low Risk. (Baseline screening; formerly National Agency Check and Inquiries (NACI)).
#LI-MR1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Location: Hybrid In-Office: Hoboken, NJ; Addison, TX; Phoenix, AZ; or Austin, TX
We protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team is the engine behind that trust, running the certification and audit programs that let security-conscious enterprises, regulated industries, and government customers confidently adopt our cloud products.
As the designated Information System Security Officer (ISSO), you will lead and execute day-to-day FedRAMP operational work at Semperis. Your role will define and document the certification boundary, specify and deploy the mandatory Key Security Indicators (KSIs), and deliver the automated evidence pipeline, FedRAMP Trust Center, and Security Inbox that FedRAMP 20x requires.
This is a hands-on, highly technical GRC role for someone who can guide how Semperis meets FedRAMP requirements and get into the details of continuous assurance automation. You will guide Semperis’s interpretation of each FedRAMP requirement and outline the implementation details directly to Semperis leadership, Security Assessors, and FedRAMP reviewers.
The role reports to the Head of Risk and Compliance, who serves as the FedRAMP Information System Security Manager (ISSM). You will work very closely with Security Engineering, Product/Engineering leadership, and Sales Government Solutions, and will be relied upon as the company’s day-to-day FedRAMP 20x subject matter expert.
In addition to FedRAMP responsibilities, you may support other Governance, Risk, Compliance, and Trust initiatives and certifications as needed to advance and mature Semperis’s GRC capabilities.
What you Will Do
FedRAMP Certification & Governance
Mobilize the FedRAMP 20x Program for in-scope product(s): guide the project charter, establish governance and reporting cadence, develop the stakeholder RACI, and work with project management to outline a viable work plan.
Work with the FedRAMP ISSM to propose staffing of required FedRAMP roles for the certification project.
Deliver a signed charter and a published work plan tracked against internal planning gates (executive go-decision, security engineering work, listing-readiness) so that no workstream is unowned.
Establish the requirements for expanded use of our GRC system for Trust Center, controls mapping, evidence collection, OSCAL outputs, and associated risk management needs.
FedRAMP Certification & Continuous Compliance
Document the Cloud Service Offering (CSO) for 20x certification, including the production environment, data plane and data flows, management plane, security controls plane, and in-scope supporting services. As applicable, reconcile the proposed FedRAMP boundary against the most recent SOC 2 report’s scope.
Complete gap assessment(s) and build capability to deliver all mandatory 20x KSIs, ensuring each has a correctly defined measure, an authoritative evidence source, an accountable owner, and a documented “Meets” status.
Design and build the FedRAMP Trust Center, Security Inbox, and a machine-readable KSI evidence pipeline, normalizing signals from CSPM, IAM, SIEM, CI/CD, and vulnerability-scanning tools so certification data is generated from live systems rather than manually assembled spreadsheets.
Partner with Product, Engineering, and Security leadership to embed FedRAMP controls directly into the SDLC and cloud infrastructure design, establishing control requirements, validating designs, and setting testable success criteria for “compliance as code” workstreams.
Deliver the FedRAMP Marketplace listing and the full 20x Certification Package, carrying it through the FedRAMP PMO’s review process to FedRAMP certification.
Operationalize the post-certification maintenance program: recurring KSI reviews, POA&M-style remediation tracking, and the required ongoing reporting cycle to FedRAMP (certification data changes, accepted vulnerabilities, transformative changes, agencies using the service, reportable incidents). Assess the security impact of proposed changes and prepare significant change submissions for the ISSM’s sign off.
Procure or develop and deliver annual and role-based training in accordance with FedRAMP requirements and manage the associated records and compliance activities.
Ensure implementation of all required non-technical controls, and manage day to day 3PAO, advisory, and accelerator vendor relationships as the program moves beyond Class A.
Drive timely remediation of risks and control gaps surfaced through audits, vulnerability scans, and penetration tests; translate technical findings into business-risk context for internal executives and (where applicable) external parties; bring risk acceptance proposals to the ISSM; escalate high-risk blockers to the Head of Risk and Compliance and/or CISO.
Define and track Key Security Indicators (KSIs) and Key Performance Indicators (KPIs) for the program, and support the Head of Risk and Compliance on related Key Risk Indicators (KRIs).
Support other certifications on the roadmap, such as GovRAMP, HIPAA, and CJIS, and lead the workstreams assigned to you.
Build the data-backed analysis behind the recommendation on whether and when to pursue higher level certification(s), grounded in Year 1 pipeline, conversion, and demand-signal data, including staffing, GovCloud, and cost implications, delivered in time to inform executive and board budget planning.
Security, Privacy and Reporting Responsibilities
Safeguard the confidentiality, integrity, and availability of federal information and systems within the authorization boundary and protect from unauthorized access, use, disclosure, or misuse; report any instance of unauthorized access, use, or misuse through required channels.
Comply with and help enforce personnel-security policies and procedures and acceptable-use/rules-of-behavior requirements for personnel in trusted roles.
Report insider-threat indicators and security/suitability concerns promptly through designated channels; support insider-threat program requirements.
Document and report security incidents within required timeframes.
Support internal and external security assessments, audits, and agency reviews
What You Will Bring (Required)
6+ years of experience in GRC, information security compliance, or IT audit, including hands-on FedRAMP ISSO experience through at least one full Rev 5 authorization (typically about 3 years) at a SaaS or cloud software company.
At least one of the following certifications: CRISC, CISM, CISA, CISSP, or an equivalent recognized security, risk, or audit management credential.
Direct implementation of NIST SP 800-53 controls within a FedRAMP authorization. If you have one full authorization behind you, some FedRAMP 20x exposure is also expected.
Working fluency across cloud (Azure, AWS) and platform security domains: IAM, encryption, vulnerability management, SIEM, and cloud configuration.
Ability to work independently as an individual contributor: owning your deliverables, setting priorities for your workstreams, and knowing when to act on your own and when to bring an issue to the ISSM.
Strong \"manage by influence\" track record: experience driving engineers, product managers, and other non-reporting stakeholders to deliver evidence, remediate findings, and meet audit deadlines.
Direct experience managing external auditors, assessors, or certification bodies through full audit cycles.
Preferred Qualifications
Experience with or exposure to FedRAMP 20x KSIs (not just Rev 5 process), and familiarity with higher-tier FedRAMP certifications (Moderate and High).
Experience with related frameworks: DoD Impact Levels, GovRAMP/StateRAMP, CMMC, NIST 800-171, and CUI handling requirements.
Familiarity with GRC and compliance automation tooling (for example, Vanta or comparable platforms), AI tools to generate automated workflows and deliverables, and Lucid or Visio to produce and maintain system diagrams.
Experience designing evidence collection and validation architecture that turns data and signals from CSPM, IAM, SIEM, CI/CD, and vulnerability scanning tools into machine readable (OSCAL) compliance evidence, and partnering with the engineers who build the automation.
Success Measures
FedRAMP certification is achieved and maintained on schedule with no high or critical assessment findings.
Automated continuous KSI reporting via the FedRAMP Trust Center.
Cross-functional control owners consistently meet remediation and evidence deadlines without requiring escalation.
Customer Trust support commitments are met on time whenever called upon.
Special Security and Privacy Requirements
This position carries special Security and Privacy Responsibilities for protecting U.S. Government interests:
Know, acknowledge, and follow system-specific security policies and procedures;
Protect government data and individual privacy per requirements and regulations;
Perform ongoing activities in compliance with service and contractual obligations;
Participate in role-based training, completing assignments on a timely basis;
Report security issues promptly, and aid security investigations when needed;
Support controlled changes and vulnerability remediation activities; and
Work collaboratively in designing, implementing, assessing or enhancing system-specific security and privacy controls.
Additionally, this position requires the following:
• U.S. citizenship.
• Residency within the contiguous United States (within distance of Semperis TX, NJ offices); and
• Willingness to undergo a Single Source or similar Background Investigation if required.
Position Risk Designation:
The selected incumbent may be subject to additional background checks with periodic re-screening as noted below:
Position Risk Designation: Non-Sensitive, Low Risk, Tier 1
Incumbents with certain access to U.S. Government data may be required to complete Standard Form 85 and undergo a Tier 1 Investigation (T1) for non-sensitive positions of Low Risk. (Baseline screening; formerly National Agency Check and Inquiries (NACI)).
#LI-MR1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Location: Hybrid In-Office: Hoboken, NJ; Addison, TX; Phoenix, AZ; or Austin, TX
We protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team is the engine behind that trust, running the certification and audit programs that let security-conscious enterprises, regulated industries, and government customers confidently adopt our cloud products.
As the designated Information System Security Officer (ISSO), you will lead and execute day-to-day FedRAMP operational work at Semperis. Your role will define and document the certification boundary, specify and deploy the mandatory Key Security Indicators (KSIs), and deliver the automated evidence pipeline, FedRAMP Trust Center, and Security Inbox that FedRAMP 20x requires.
This is a hands-on, highly technical GRC role for someone who can guide how Semperis meets FedRAMP requirements and get into the details of continuous assurance automation. You will guide Semperis’s interpretation of each FedRAMP requirement and outline the implementation details directly to Semperis leadership, Security Assessors, and FedRAMP reviewers.
The role reports to the Head of Risk and Compliance, who serves as the FedRAMP Information System Security Manager (ISSM). You will work very closely with Security Engineering, Product/Engineering leadership, and Sales Government Solutions, and will be relied upon as the company’s day-to-day FedRAMP 20x subject matter expert.
In addition to FedRAMP responsibilities, you may support other Governance, Risk, Compliance, and Trust initiatives and certifications as needed to advance and mature Semperis’s GRC capabilities.
What you Will Do
FedRAMP Certification & Governance
Mobilize the FedRAMP 20x Program for in-scope product(s): guide the project charter, establish governance and reporting cadence, develop the stakeholder RACI, and work with project management to outline a viable work plan.
Work with the FedRAMP ISSM to propose staffing of required FedRAMP roles for the certification project.
Deliver a signed charter and a published work plan tracked against internal planning gates (executive go-decision, security engineering work, listing-readiness) so that no workstream is unowned.
Establish the requirements for expanded use of our GRC system for Trust Center, controls mapping, evidence collection, OSCAL outputs, and associated risk management needs.
FedRAMP Certification & Continuous Compliance
Document the Cloud Service Offering (CSO) for 20x certification, including the production environment, data plane and data flows, management plane, security controls plane, and in-scope supporting services. As applicable, reconcile the proposed FedRAMP boundary against the most recent SOC 2 report’s scope.
Complete gap assessment(s) and build capability to deliver all mandatory 20x KSIs, ensuring each has a correctly defined measure, an authoritative evidence source, an accountable owner, and a documented “Meets” status.
Design and build the FedRAMP Trust Center, Security Inbox, and a machine-readable KSI evidence pipeline, normalizing signals from CSPM, IAM, SIEM, CI/CD, and vulnerability-scanning tools so certification data is generated from live systems rather than manually assembled spreadsheets.
Partner with Product, Engineering, and Security leadership to embed FedRAMP controls directly into the SDLC and cloud infrastructure design, establishing control requirements, validating designs, and setting testable success criteria for “compliance as code” workstreams.
Deliver the FedRAMP Marketplace listing and the full 20x Certification Package, carrying it through the FedRAMP PMO’s review process to FedRAMP certification.
Operationalize the post-certification maintenance program: recurring KSI reviews, POA&M-style remediation tracking, and the required ongoing reporting cycle to FedRAMP (certification data changes, accepted vulnerabilities, transformative changes, agencies using the service, reportable incidents). Assess the security impact of proposed changes and prepare significant change submissions for the ISSM’s sign off.
Procure or develop and deliver annual and role-based training in accordance with FedRAMP requirements and manage the associated records and compliance activities.
Ensure implementation of all required non-technical controls, and manage day to day 3PAO, advisory, and accelerator vendor relationships as the program moves beyond Class A.
Drive timely remediation of risks and control gaps surfaced through audits, vulnerability scans, and penetration tests; translate technical findings into business-risk context for internal executives and (where applicable) external parties; bring risk acceptance proposals to the ISSM; escalate high-risk blockers to the Head of Risk and Compliance and/or CISO.
Define and track Key Security Indicators (KSIs) and Key Performance Indicators (KPIs) for the program, and support the Head of Risk and Compliance on related Key Risk Indicators (KRIs).
Support other certifications on the roadmap, such as GovRAMP, HIPAA, and CJIS, and lead the workstreams assigned to you.
Build the data-backed analysis behind the recommendation on whether and when to pursue higher level certification(s), grounded in Year 1 pipeline, conversion, and demand-signal data, including staffing, GovCloud, and cost implications, delivered in time to inform executive and board budget planning.
Security, Privacy and Reporting Responsibilities
Safeguard the confidentiality, integrity, and availability of federal information and systems within the authorization boundary and protect from unauthorized access, use, disclosure, or misuse; report any instance of unauthorized access, use, or misuse through required channels.
Comply with and help enforce personnel-security policies and procedures and acceptable-use/rules-of-behavior requirements for personnel in trusted roles.
Report insider-threat indicators and security/suitability concerns promptly through designated channels; support insider-threat program requirements.
Document and report security incidents within required timeframes.
Support internal and external security assessments, audits, and agency reviews
What You Will Bring (Required)
6+ years of experience in GRC, information security compliance, or IT audit, including hands-on FedRAMP ISSO experience through at least one full Rev 5 authorization (typically about 3 years) at a SaaS or cloud software company.
At least one of the following certifications: CRISC, CISM, CISA, CISSP, or an equivalent recognized security, risk, or audit management credential.
Direct implementation of NIST SP 800-53 controls within a FedRAMP authorization. If you have one full authorization behind you, some FedRAMP 20x exposure is also expected.
Working fluency across cloud (Azure, AWS) and platform security domains: IAM, encryption, vulnerability management, SIEM, and cloud configuration.
Ability to work independently as an individual contributor: owning your deliverables, setting priorities for your workstreams, and knowing when to act on your own and when to bring an issue to the ISSM.
Strong \"manage by influence\" track record: experience driving engineers, product managers, and other non-reporting stakeholders to deliver evidence, remediate findings, and meet audit deadlines.
Direct experience managing external auditors, assessors, or certification bodies through full audit cycles.
Preferred Qualifications
Experience with or exposure to FedRAMP 20x KSIs (not just Rev 5 process), and familiarity with higher-tier FedRAMP certifications (Moderate and High).
Experience with related frameworks: DoD Impact Levels, GovRAMP/StateRAMP, CMMC, NIST 800-171, and CUI handling requirements.
Familiarity with GRC and compliance automation tooling (for example, Vanta or comparable platforms), AI tools to generate automated workflows and deliverables, and Lucid or Visio to produce and maintain system diagrams.
Experience designing evidence collection and validation architecture that turns data and signals from CSPM, IAM, SIEM, CI/CD, and vulnerability scanning tools into machine readable (OSCAL) compliance evidence, and partnering with the engineers who build the automation.
Success Measures
FedRAMP certification is achieved and maintained on schedule with no high or critical assessment findings.
Automated continuous KSI reporting via the FedRAMP Trust Center.
Cross-functional control owners consistently meet remediation and evidence deadlines without requiring escalation.
Customer Trust support commitments are met on time whenever called upon.
Special Security and Privacy Requirements
This position carries special Security and Privacy Responsibilities for protecting U.S. Government interests:
Know, acknowledge, and follow system-specific security policies and procedures;
Protect government data and individual privacy per requirements and regulations;
Perform ongoing activities in compliance with service and contractual obligations;
Participate in role-based training, completing assignments on a timely basis;
Report security issues promptly, and aid security investigations when needed;
Support controlled changes and vulnerability remediation activities; and
Work collaboratively in designing, implementing, assessing or enhancing system-specific security and privacy controls.
Additionally, this position requires the following:
• U.S. citizenship.
• Residency within the contiguous United States (within distance of Semperis TX, NJ offices); and
• Willingness to undergo a Single Source or similar Background Investigation if required.
Position Risk Designation:
The selected incumbent may be subject to additional background checks with periodic re-screening as noted below:
Position Risk Designation: Non-Sensitive, Low Risk, Tier 1
Incumbents with certain access to U.S. Government data may be required to complete Standard Form 85 and undergo a Tier 1 Investigation (T1) for non-sensitive positions of Low Risk. (Baseline screening; formerly National Agency Check and Inquiries (NACI)).
#LI-MR1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Semperis is seeking a Commercial Sales Director to accelerate growth across GCC & Turkey, helping more enterprise, government, and regulated-sector organisations strengthen cyber resilience through identity-first security.
In this role, you will lead commercial growth across the region and build Semperis’ market presence. This is a high-impact individual contributor opportunity for a self-starting, commercially driven seller who can combine enterprise selling to CIO and CISO-level buyers with high-velocity deal execution, strong channel engagement, and the ability to navigate complex regional procurement environments.
This is a new-business hunting role with a significant opportunity to build a territory and make a visible impact. You will have the autonomy to open doors, create pipeline through direct prospecting, executive relationships, and partner engagement, and win new customers. As you grow Semperis’ presence across the region, you will have the opportunity to expand your scope and grow your career.
What you will do
Own the regional sales plan across the GCC and Turkey, covering new-logo and expansion opportunities
Generate pipeline through targeted prospecting and executive engagement
Activate distributors, resellers, and systems integrators to source and win business
Lead discovery with CIOs, CISOs, and senior security leaders, connecting customer risks and priorities to Semperis solutions
Manage opportunities from qualification through negotiation and close, maintaining clear deal strategies and accurate forecasts
Navigate GCC procurement processes and complex regulated-sector buying environments
Collaborate with Channel, Marketing, Solutions Engineering, and Customer Success to progress opportunities and support customers
Deliver agreed revenue and deal-volume targets, including approximately 3–4 closed-won deals per month, subject to agreed quota and deal-size expectations
Improve win rates and reduce sales-cycle duration through disciplined qualification and execution
Build Semperis’ regional presence through customer, partner, and industry engagements
What you will bring
5+ years of B2B commercial sales experience with a track record of delivering against revenue targets, within cybersecurity or adjacent technology
Fluency in English and Turkish is essential; Arabic is highly desirable
Experience selling to CIOs, CISOs, and senior technology leaders in enterprise, government, or regulated organisations across the GCC and Turkey
Strong prospecting and closing skills, with the ability to manage complex opportunities while maintaining deal velocity
Success generating pipeline and revenue through distributors, resellers, and systems integrators
The ability to translate technical security challenges into a compelling business case for investment
A self-starting, accountable approach, with the confidence to build a territory and operate independently in a high-growth environment
Identity-security experience is preferred; familiarity with Active Directory, hybrid cloud, or cyber resilience is a plus
Existing customer or partner relationships across the region are advantageous
Willingness to travel occasionally across the GCC and Turkey
#LI-LP1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Semperis is seeking a Commercial Sales Director to accelerate growth across DACH, Poland, and the Baltics, helping more enterprise, government, and regulated-sector organisations strengthen cyber resilience through identity-first security.
In this role, you will lead commercial growth across the region and build Semperis’ market presence. This is a high-impact individual contributor opportunity for a self-starting, commercially driven seller who can combine enterprise selling to CIO and CISO-level buyers with high-velocity deal execution, strong channel engagement, and the ability to navigate complex regional procurement environments.
This is a new-business hunting role with a significant opportunity to build a territory and make a visible impact. You will have the autonomy to open doors, create pipeline through direct prospecting, executive relationships, and partner engagement, and win new customers. As you grow Semperis’ presence across the region, you will have the opportunity to expand your scope and grow your career.
What you will do
Own the regional sales plan across DACH, Poland, and the Baltics, covering new-logo and expansion opportunities
Generate pipeline through targeted prospecting and executive engagement
Activate distributors, resellers, and systems integrators to source and win business
Lead discovery with CIOs, CISOs, and senior security leaders, connecting customer risks and priorities to Semperis solutions
Manage opportunities from qualification through procurement, negotiation, and close, maintaining clear deal strategies and accurate forecasts
Collaborate with Channel, Marketing, Solutions Engineering, and Customer Success to progress opportunities and support customers
Deliver agreed revenue and deal-volume targets, including approximately 3–4 closed-won deals per month, subject to agreed quota and deal-size expectations
Improve win rates and reduce sales-cycle duration through disciplined qualification and execution
Build Semperis’ regional presence through customer, partner, and industry engagements
What you will bring
5+ years of B2B commercial sales experience with a track record of delivering against revenue targets, within cybersecurity or adjacent technology
Identity-security experience is preferred; familiarity with Active Directory, hybrid cloud, or cyber resilience is a plus
Fluency in German and English is essential; Polish or other regional languages are a significant advantage
Experience selling to CIOs, CISOs, and senior technology leaders in enterprise, government, or regulated organizations, including navigating European procurement processes
Strong prospecting and closing skills, with the ability to manage complex opportunities while maintaining deal velocity
Success generating pipeline and revenue through distributors, resellers, and systems integrators
The ability to translate technical security challenges into a compelling business case for investment
A self-starting, accountable approach, with the confidence to build a territory and operate independently in a high-growth environment
Existing customer or partner relationships across the region are advantageous
Willingness to travel occasionally across DACH, Poland, and the Baltics
#LI-LP1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
We’re looking for an HR Generalist for a 12-month maternity leave replacement who brings together a strong people focus and a solid HR Operations mindset. In this role, you will support employees and managers with day-to-day HR needs while also taking ownership of HR processes, systems, reporting, and people data. Working closely with the HRBP team, you will contribute to people initiatives, turn data into useful insights, and help identify ways to improve our HR practices.
This role will suit someone who enjoys variety and feels comfortable moving between people conversations, detailed processes, systems operations, and data analysis. We are looking for someone who takes initiative, enjoys getting things done, and genuinely values the combination of people-facing work and strong operational execution.
Key Responsibilities
Serve as a point of contact for employees and support managers on day-to-day HR matters, in partnership with the HRBP.
Support employee lifecycle processes, including onboarding, offboarding, employee changes, and documentation.
Maintain HRIS and other HR systems, ensuring accurate data and records.
Prepare HR reports and insights to support data-informed decisions and HRBP-led initiatives.
Support employee relations, provide HR services for leaders, and manage HR initiatives.
Proactively identify trends, challenges, and opportunities to improve HR processes, employee experience, and business impact.
Coordinate HR processes across stakeholders and ensure timely follow-through.
Partner with the broader People team on operational projects and process improvements.
Requirements
3+ years of experience in a similar role:
Experience providing employee-focused HR support across the employee lifecycle.
Hands-on experience with HR systems and maintaining accurate employee data; Workday experience is a significant advantage.
Exposure to HR partnering, employee relations, or manager support is an advantage.
Proficiency in Microsoft Office, with strong Excel skills.
Service-oriented, proactive, and collaborative approach, with a high level of confidentiality.
Strong organizational skills, attention to detail, and ability to manage multiple priorities.
Experience using AI tools and building automations to improve HR processes.
Fluent English; additional languages are an advantage.
#LI-TI1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
We are seeking an experienced Senior C++ Software Engineer with strong
system-level programming expertise and advanced troubleshooting capabilities.
The ideal candidate will have a deep knowledge of Windows internals and be
passionate about solving complex technical challenges.
Key Responsibilities:
Design and implement high-performance C++ applications while
maintaining code quality and system stability
Develop and maintain user-mode components that are injected into sensitive Windows processes and intercept system APIs
Perform advanced crash dump analysis and BSOD investigations
Develop and maintain components that work with Windows security protocols
Collaborate with cross-functional teams to diagnose and resolve
critical technical issues
Required Qualifications:
Bachelor's degree in Computer Science, Software Engineering, or
related field
7+ years of professional experience in C++ development with demonstrated senior-level expertise
Expert-level knowledge of Windows internals and system
architecture
Hands-on experience with DLL injection and API hooking (e.g., Microsoft Detours, MinHook) in production code
Advanced proficiency in WinDbg for crash dump analysis,
including:
Strong understanding of x64 architecture
Extensive experience with WIN32 API
Ability to analyze and resolve BSOD issues
knowledge of Windows Authentication Architecture:
SSPI
Kerberos protocol implementation
LDAP protocol and directory services
Extensive experience with: RPC, DCOM
Strong understanding of memory management, thread
synchronization, and system resource optimization
#LI-HA1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
Semperis is looking for an experienced Senior Pre-Sales Engineer to join the LATAM Team.
.
What You'll Be Doing:
As a senior sales engineer at Semperis, you’ll be an essential member of our pursuit team, collaborating with sales, engineering, product management, marketing and business development to deliver the latest security and identity products. You’ll collaborate with sales to identify effective strategies and new product opportunities. You’ll be responsible for the technical aspects of security and identity products offered to our customers. You’ll be integral in shaping future product development by listening for customer challenges and evolving market needs.
What you will be doing:
Conduct effective and compelling product demonstrations online and in-person. Lead technical presentations in person and assist sales directors with ROI and Business Impact presentations.
Conduct proof of value technical installations directly with customers.
Collaborate with Sales to identify and create winning sales strategies and new product opportunities
Use consultative selling to identify customer pain points associated with large directory services environments
Convey and document technical requirements to and from customers
Provide input and feedback to product and engineering and development teams
Provide pre-sales technical assistance and product education
Design technical solutions to meet customer’s business, technical, and/or financial goals
Partner with the Sales team to develop requirements documents, presentations, proposals, business impact and ROI models, and coordinate with a team of support specialists, consultants, or project managers to execute sales objectives or to ensure that all pre-sales customer requirements are documented and transitioned
Maintain expert knowledge of Semperis products and industry threats to develop and present unique solutions, and maintain knowledge of emerging trends in related technology areas
Willingness to travel to customers or events as necessary
What You’ll Bring:
Based in Brazil. São Paulo is the preferred location.
Strong English language skills; Fluency in Portuguese; Spanish is a plus
5+ years of pre-sales, solutions engineering, sales engineering, or solutions architecture experience in a cybersecurity, identity security, or enterprise software environment.
Excellent communication, presentation, and storytelling skills, with the ability to translate complex technical concepts into clear business value
Experience in Identity Security, Identity and Access Management (IAM), Privileged Access Management (PAM), Identity Threat Detection and Response (ITDR), or related cybersecurity domains.
Strong understanding of the identity security and cybersecurity market landscape, including competing solutions and emerging technologies.
Familiarity with Active Directory, Entra ID, Okta or other identity platforms is preferred.
Experience delivering customer-facing software demonstrations and technical presentations.
Experience building and leading proof-of-concept engagements directly with customers.
Ability to communicate effectively with both technical and business stakeholders and articulate business value beyond technical capabilities.
Bachelor's degree in Computer Science, Engineering, Economics, or a related field, or equivalent practical experience.
** Willingness to travel up to 50%
#LI-HA1
Why Join Semperis?
You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.
**Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.