Senior Software Engineer, Security

Role Description

AssemblyAI runs a mature, multi-framework security and compliance program—including SOC 2 (all trust criteria), ISO 27001, and PCI 4.0—that protects the infrastructure and customer data behind our industry-leading Voice AI API. We're hiring a Senior Software Engineer in the security space to join our IT & Security team as the company's first security engineering role.

This role sits at the intersection of security engineering and security operations. You'll split your time between hands-on engineering work and the operational work that keeps our security program running. You should be energized by both sides of that equation, not just one.

This is a high-ownership role on a small team. You'll work closely with engineers across the company, partner with sales and legal on customer-facing security needs, and have a direct hand in shaping how AssemblyAI secures its products, infrastructure, and internal tools.

What You’ll Do:

• Security Engineering
  • Conduct threat modeling and security design reviews for new features, services, and architectural changes.
  • Perform secure code reviews and provide actionable feedback.
  • Deploy and maintain security tooling across the development lifecycle.
  • Support best practices to adopt secure-by-default libraries and frameworks.
  • Partner with platform engineering on infrastructure and environment security.
  • Contribute to incident response for security events.
• Security Operations
  • Drive vulnerability triage and prioritization across teams.
  • Partner with sales and legal responding to customer and vendor questionnaires.
  • Support compliance audit cycles by gathering evidence and documenting controls.
  • Monitor and respond to alerts from security tools.
  • Execute recurring user access reviews and IAM hygiene tasks.
  • Maintain and improve security runbooks and process documentation.

Qualifications

• 5+ years of experience in security engineering, security operations, or a related role.
• Hands-on experience with at least one of SOC 2, ISO 27001, or PCI compliance audit cycles.
• Strong application security fundamentals.
• Experience with security tooling across the development lifecycle.
• Working knowledge of AWS infrastructure and services.
• Familiarity with infrastructure-as-code and CI/CD pipeline security.
• Proficiency in Python and comfort reading code across backend services.
• Strong written communication skills.
• Comfort using AI-assisted development tools.

Nice to have

• Experience securing AI/ML systems or inference infrastructure.
• Familiarity with endpoint security platforms and cloud security tooling.
• Security incident handling experience.
• Experience with vulnerability management programs.
• Security certifications (CISSP, CSSLP, AWS Security Specialty, or equivalent).
• Experience at a high-growth startup in a security role.

Pay Transparency

AssemblyAI strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity across our team. Our salary ranges are set to be competitive for our size, stage, and industry, and reflect just one component of the full compensation, benefits, and rewards we offer.

Salary range: $180,000 - $220,000 USD

The expected base compensation for this role is listed above. Our total compensation package includes competitive equity grants, 100% employer-paid benefits, and the flexibility of being fully remote.