Full-Time

Head of Revenue Operations

Posted on 8/22/2026

Truffle Security

Truffle Security

51-200 employees

Open-source scanning for credential secrets

Compensation Overview

$210k - $250k/yr

Remote in USA

Remote

Fully remote within the U.S.; twice-yearly company off-sites are required.

Category
Business & Strategy (1)
Required Skills
Forecasting
CRM
HubSpot
Salesforce

Get referred to Truffle Security

See people who can refer or advise you

Requirements
  • At least 6 years of experience in revenue operations, sales operations, or go-to-market operations at B2B SaaS companies, including at least 2 years leading the function or a significant part of it.
  • Deep, hands-on Salesforce expertise, including improving an inherited instance's architecture, data quality, and reporting.
  • Experience owning architecture across a marketing automation platform and a customer relationship management platform and integrating them as one system.
  • Experience standing up new functions such as deal desk, marketing operations, and customer success operations.
  • Experience designing and modeling compensation plans across account executive and sales development representative roles.
  • Experience owning forecast methodology and annual planning, including territories, capacity, and quotas, at a growing sales organization.
  • Fluency in pipeline mathematics, conversion analysis, and forecast methodology, with the ability to defend numbers to a CEO and board.
  • Ability to operate in ambiguity at an early-stage company and set strategy while executing the work.
Responsibilities
  • Assess the Salesforce instance and strengthen it into a coherent architecture with clean data, clear definitions, and trusted reporting, then align the surrounding go-to-market stack.
  • Own sales operations, marketing operations, and customer success operations across the revenue funnel from lead attribution through renewal.
  • Maintain revenue data integrity through a unified architecture, enforced business definitions, and reconciled reporting across marketing, sales, finance, and board systems.
  • Build and directly operate the deal desk, including pricing approvals, quote-to-close workflows, non-standard deal governance, and pricing guardrails.
  • Own marketing operations infrastructure that captures, enriches, routes, and nurtures leads and measures program spend against pipeline.
  • Own compensation plan design and modeling for sales and sales development representative functions in partnership with Finance, which administers payouts.
  • Own forecast methodology, cadence, and tooling, and run the operating rhythm supporting the forecast.
  • Lead annual planning, including territory design, capacity planning, and quota setting, in partnership with sales leadership and Finance.
  • Own the go-to-market technology stack, including vendor selection, contracts, budget, and tool consolidation.
  • Define and enforce processes for lead routing, sourcing attribution, opportunity stages, sales-qualified lead definitions, and forecast methodology.
  • Manage and develop the current Business Systems team member.
  • Shape, hire, and grow the planned go-to-market engineering function, including automation and artificial-intelligence-driven workflows.
  • Establish documented deal-desk approval workflows and pricing guardrails.
  • Establish and enforce lead-routing, sourcing-credit, and qualification definitions in systems.
  • Design, model, and document compensation plans and hand them off to Finance for administration.
Desired Qualifications
  • Experience in security, developer tools, or open-source-driven companies.
  • Experience converting open-source adoption signals into an enterprise revenue process.
  • Experience supporting channel and partner sales models.
  • Exposure to usage-based or seat-based pricing model transitions.

TruffleSecurity develops cybersecurity tooling focused on protecting sensitive data. Its flagship product, TruffleHog, scans codebases, version histories, and other hidden content to locate exposed credentials across an organization. The open-source engine checks more than 700 credential types against the key provider, which reduces false positives and speeds up accurate detection. It also automates the remediation of discovered secrets to shorten response time. Compared with competitors, TruffleHog’s open-source nature, broad credential type coverage, and automated remediation set it apart, along with open integrations that support transparency and collaboration. The company's goal is to help organizations discover and secure leaked or stored secrets quickly, lowering the risk of credential theft and data breaches across various industries and business sizes.

Company Size

51-200

Company Stage

Series B

Total Funding

$40M

Headquarters

San Francisco, California

Founded

2019

Get referred to Truffle Security

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Truffle Security raised $25 million Series B on November 6, 2025 for NHI expansion.
  • May 2026 TruffleHog Enterprise added GCP Analyze, IAM insights, and guided secret rotation.
  • Its February 2026 disclosure of 2,863 live Google API keys proved real-world detection value.

What critics are saying

  • Google’s February 2026 Gemini key incident sharpened competition around secrets discovery and response.
  • Open-source TruffleHog keeps monetization pressure high as competitors copy detectors and bundle platforms.
  • If enterprise adoption stalls, Truffle Security remains vulnerable despite Intel Capital and a16z backing.

What makes Truffle Security unique

  • TruffleHog verifies 700-plus credential types, cutting false positives versus generic secret scanners.
  • Truffle Security owns both open-source detection and paid enterprise remediation workflows.
  • Hugging Face integrated TruffleHog into its scanning pipeline in September 2024.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Remote Work Options

Flexible Paid Time Off

Paid Holidays

Comprehensive health benefits

401(k) Company Match

Health & wellness stipend

Learning & development stipend

Remote work stipend

Growth & Insights and Company News

Headcount

6 month growth

-1%

1 year growth

1%

2 year growth

0%
Truffle Security Co.
Nov 7th, 2025
TruffleHog Analyze press release ◆ Truffle Security Co.

TruffleHog Analyze press release

SiliconANGLE Media
Nov 6th, 2025
Truffle Security secures $25M to protect codebases from leaked secrets and nonhuman identities

Truffle Security secures $25M to protect codebases from leaked secrets and nonhuman identities. Open-source security software company Truffle Security Co. announced today that it has raised $25 million in new funding to fuel continued growth of TruffleHog Enterprise, the company's enterprise-grade secrets detection, verification and remediation solution, and expand its development in secrets and nonhuman identities protection. Founded in 2019, Truffle Security provides paid solutions based on TruffleHog, an open-source tool that scans code repositories for exposed secrets such as application programming interface keys, tokens and passwords. the tool helps developers and security teams quickly identify and remediate leaked credentials before they can be exploited. Truffle Security's offering is focused on detecting exposed secrets, such as API keys, tokens, service-account credentials and other nonhuman identities, across codebases, cloud environments and repositories. The open-source engine supports hundreds of detectors and is designed to scan for signs of secret leakage or improper credentials being checked in. The company also offers verification and remediation where, once a secret is found, the platform helps determine whether it is active, what systems it could access and what the blast radius might be. The results give contextual insight that allows security teams and development teams to prioritize and respond quickly. Truffle Security's paid offering, TruffleHog Enterprise, provides monitoring, detection and integration into the software development lifecycle so that secrets don't become entry points for breaches. The Series A round was led by Intel Capital Corp. and a16z (Andreessen Horowitz). Joining the round were Abstract Ventures, Lytical Ventures and individual investors. Those included Casey Ellis, founder of BugCrowd Inc., as well as Emilio Escobar, chief information security officer at Datadog Inc. ,and Haroon Meer, founder and chief executive of Thinkst Applied Research Pty. Ltd. "As AI transforms how software is built, the security surface is expanding just as quickly," said Martin Casado, general partner at Andreessen Horowitz. "Truffle Security is tackling one of the most urgent challenges in this new era, which is protecting codebases from secret exposure at scale." Along with the funding, Truffle Security also announced a new GCP Analyze add-on for TruffleHog Enterprise that is designed to significantly reduce time to remediation when Google Cloud Platform secrets leak. With GCP Analyze, security teams get instant context, including what resources it can access, its inheritance and the blast radius of its permissions, instead of having to spend hours untangling identity and access management complexity. The new offering is built on top of TruffleHog Enterprise's verified secret detection, which eliminates false positives to help security teams remediate threats faster and more confidently across the software development lifecycle. Coming into the new funding round, Truffle Security had previously raised a $14 million Series A round in December 2021, according to data from Tracxn. Image: Truffle Security. A message from John Furrier, co-founder of SiliconANGLE: Support its mission to keep content open and free by engaging with theCUBE community. Join theCUBE's Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities. * 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more * 11.4k+ theCUBE alumni - Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network. SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios - with flagship locations in Silicon Valley and the New York Stock Exchange - SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Its new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.

PR Newswire
Nov 6th, 2025
Truffle Security Secures $25M for Expansion

Truffle Security announced a $25 million Series B funding round led by Intel Capital and a16z, with participation from Abstract, Lytical Ventures, and security leaders. The funding will support customer growth and product expansion, including TruffleHog GCP Analyze for detecting leaked Google Cloud secrets. The investment aims to enhance TruffleHog Enterprise's capabilities in secrets detection and NHI protection, addressing the growing security challenges in the AI-driven software development era.

CO/AI
Sep 5th, 2024
Hugging Face Partners with Truffle Security to Protect Code Repositories

Key partnership details: The collaboration between Hugging Face and Truffle Security aims to prevent accidental leaks of sensitive information in code repositories.

Trend Hunter
Aug 8th, 2024
Leaked Credentials Cybersecurity Tools

Truffle Security launches trufflehog Analyze as a solution.