Field Chief Technology Officer - EU · USA · MENA ·

About Imperum & the role (Regional roles: EU · USA · MENA · Autonomous SOC)

Imperum is building an agentic AI platform for security operations – an autonomous SOC that detects, investigates, contains, and remediates threats with minimal human intervention. We sell to CISOs and Heads of SOC who are ready to rethink how their operations run.

The Field CTO owns the technical customer journey end-to-end: from the first demo, through POC design and execution, to deployment, adoption, expansion, and renewal. You win deals technically, and you keep them won by making sure customers are genuinely successful. Roughly 45% pre-sales, 35% post-sales, 15% product feedback into Engineering, 5% analyst and event presence.

Regional scope

We are hiring three Field CTOs: one in the EU, one in the USA, one in MENA. Each role is regionally anchored – you live in the region, know the market, and speak the languages that matter. The responsibilities below are shared; regional specifics are at the end of this document.

What you’ll doPre-sales: win the technical evaluation

•    Lead technical discovery with CISOs, Heads of SOC, and security architects. Surface the real buying criteria, not the stated ones.

•    Deliver tailored demos that land on the prospect’s actual use cases and stand up to hard questions.

•    Own POCs end-to-end: success criteria, environment, execution, debrief. Pilots must be winnable, measurable, and representative of production.

•    Run architecture workshops on how Imperum’s agents fit an existing SOC stack, what data they need, and what guardrails apply.

•    Handle the technical objections that kill deals: autonomy and control, data residency, model behavior, compliance, platform security.

•    Own RFI / RFP / security questionnaire responses for your region.

•    Be accountable for technical win rate in your region.

Post-sales: make customers genuinely successful

•    Own technical onboarding and deployment for every customer in your region: integration plan, rollout phases, and concrete 30/90/180-day success criteria.

•    Be the senior technical escalation point. When something is hard, broken, or politically hot, you are in the room.

•    Drive measurable outcomes: MTTR reduction, SOC throughput, alert fatigue, analyst retention. Own the numbers, not just the relationship.

•    Own technical health: adoption, usage depth, open issues, churn risk. Flag early, act faster.

•    Drive expansion (new use cases, teams, data sources) and own renewals technically with proof of value.

Close the loop – and represent Imperum

•    Carry the voice of the field into Product and Engineering weekly: what blocks deals, adoption, and renewals. Prioritize ruthlessly; say “no, and here’s why” with conviction.

•    Co-design features with Engineering; bring real-world scenarios that force the agent architecture to hold up under pressure.

•    Build and maintain the assets that let you scale: demo environments, POC playbooks, reference architectures, objection libraries.

•    Brief regional analysts (Gartner, Forrester, IDC, equivalents) and speak at a small number of high-signal events per year.

What we’re looking forMust-have

•    Fluent English (spoken and written). Regional languages matter – see notes below.

•    12+ years in cybersecurity, with real operator credibility (SOC lead, Head of SOC, Deputy CISO, CISO, or equivalent). You have lived the pain our product solves – not only sold against it.

•    Proven pre-sales and post-sales technical leadership at a security vendor. Field CTO, Principal Sales Engineer, Head of Sales Engineering, Principal Solutions Architect, or similar at a SIEM, EDR/XDR, SOAR, or MDR company. You have personally delivered demos, run POCs, and owned deployments at scale.

•    Deep knowledge of SOC, Incident Response, and Forensics. Investigation lifecycle, IR lifecycle, detection engineering, MITRE ATT&CK, SIEM and EDR internals – enough to architect a deployment live in front of a skeptical CISO.

•    Hands-on POC and deployment experience. You have stood up POC environments, integrated data sources, tuned detection logic, and run live demos. Comfortable in a terminal and in a boardroom.

•    Working fluency in agentic AI and LLMs. You speak credibly about how LLM-powered agents work, where they fail, and how to deploy them responsibly. You understand RAG, tool use, evaluations, guardrails, and prompt injection at a level that stands up to technical CISO questions.

•    Track record on numbers that matter. POC win rate, technical win rate on seven- and eight-figure ACV deals, customer health / NPS / NRR, renewals saved or grown.

•    Executive presence and exceptional communication. You hold the room with a Fortune 500 CISO, de-escalate a hostile POC debrief without losing the deal, and move fluidly between the boardroom, the SOC floor, and the engineering standup.

•    Right to work in the region you are applying for without visa sponsorship. We are not able to sponsor or relocate internationally for this role.

Nice-to-have

•    Security certifications with audience weight (CISSP, CISM, GCIH, GCFA, GSE).

•    Time at a high-growth security startup that scaled to meaningful ARR.

•    Existing analyst relationships and CISO community presence.

•    Prior CISO time served or board-level advisory experience.

Regional notesEU

Based in the EU (Paris, Amsterdam, Munich, Zurich, Stockholm, or similar). 30–50% travel within EMEA. Working fluency in a major EU language beyond English (French, German, Spanish, Italian, or Dutch) strongly preferred. Strong grasp of NIS2, DORA, GDPR, and the EU AI Act. Experience selling into EU financial services, industrial, or public sector a plus.

USA

Based in the US (Bay Area, NYC/NJ, DC/Northern Virginia, Austin, or Boston). 40–60% travel across North America. Deep understanding of US enterprise security buying: POC-driven, ARR-focused, Gartner-influenced. Familiarity with SEC cyber disclosure rules, state privacy laws, HIPAA, FedRAMP, SOC 2. Fortune 500 or federal/SLED experience a plus.

MENA

Based in MENA (Dubai, Abu Dhabi, Riyadh, or Doha). 40–60% regional travel. Arabic fluency strongly preferred, business-level at minimum. Deep knowledge of UAE NESA/SIA, Saudi NCA and SAMA, Qatar NCSA, and emerging Gulf data-sovereignty regimes. Relationship-first, channel-mediated buying culture; existing CISO and regional SI relationships a strong advantage.

What we offer

•    Competitive base salary, performance bonus tied to regional commercial outcomes, and meaningful RSUs.

•    A seat at the product and strategy table – not just a revenue target.

•    Top-tier hardware, travel budget, and budget for AI tools, conferences, and analyst engagement.

•    Reports to the CEO, works hand-in-hand with the VP of Engineering.

How to apply

Tell us which region you are applying for. Send your CV or LinkedIn and a short note on three things: (1) a POC you personally ran that won a hard deal – what made the difference, (2) a POC or deployment that went sideways – what you did, what you learned, and (3) an account you grew or saved post-sale. Numbers welcome.