Security Engineer

Responsibilities

• Lead detection and incident response from initial alert through investigation, postmortem, and engineering improvements.
• Own the security roadmap across product security, cloud and infrastructure security, corporate security, incident response, and compliance.
• Secure APIs, platforms, and data systems through threat modeling, design and code reviews, authentication and authorization, and secrets management.
• Build and operate monitoring, detection, and incident-response capabilities.
• Own SOC 2 compliance, including control design, security questionnaires, policy management, vendor reviews, and audits.
• Translate data-license requirements into controls for access, provenance, retention, deletion, isolation, and auditability.

Requirements

• 5+ years of hands-on security engineering experience across infrastructure, detection and response, and identity.
• Proven ability to lead security incidents end-to-end, including containment, root-cause analysis, and follow-up engineering.
• Experience implementing or operating SOC 2 or a comparable security framework and translating requirements into technical controls.
• Experience securing AI/ML infrastructure, agent execution environments, data platforms, or systems handling untrusted or sensitive data.
• Experience designing and implementing data protection controls for access, retention, deletion, isolation, and auditability.
• Experience working with legal teams, auditors, and customers on security questionnaires, policy management, and audit processes.
• Strong communication skills and sound judgment when prioritizing risks and making pragmatic decisions under uncertainty.
• Relevant certifications such as OSCP, AWS Security Specialist, OSWE, CKS, or GIAC, or demonstrated expertise through CVEs, security tooling, or bug bounty work, are preferred.

Benefits

• Full medical, dental, and vision coverage.
• 401k and commuter benefits.
• Access to leading AI productivity tools.
• Visa sponsorship and relocation support are available for strong candidates.
• On-site role in San Francisco, California, or Singapore.