Security Engineer

About the Role

As our first full-time Security Engineer, you'll own and build HUD's security program from the ground up. You'll work across product, infrastructure, compliance, and incident response to secure billions in data assets and protect our platform used by frontier labs and Fortune 500 companies. This role is critical to maintaining customer trust and ensuring our systems are never compromised.

What You'll Do

• Lead detection and incident response end-to-end, from signal and alert through investigation, postmortem, and durable improvements.
• Own HUD's security roadmap spanning product security, cloud infrastructure, corporate security, incident response, and compliance.
• Secure APIs, platforms, and data systems through threat modeling, design reviews, authentication and authorization controls, and secrets management.
• Build and operate monitoring, detection, and incident-response capabilities; drive investigations and turn emerging threats into engineering improvements.
• Own SOC 2 compliance and customer trust, including control design, security questionnaires, policy management, vendor reviews, and audits.
• Partner with legal, commercial, engineering, and operations to translate data-license requirements into enforceable controls for access, provenance, use, retention, deletion, and auditability.

What We're Looking For

• 5+ years of hands-on security engineering experience across infrastructure, detection and response, identity, and related domains.
• Proven ability to lead security incidents end-to-end, from containment through root-cause analysis and follow-up work.
• Experience implementing or operating SOC 2 or comparable security frameworks and translating requirements into technical controls.
• Experience securing AI/ML infrastructure, agent execution environments, data platforms, or systems handling untrusted or sensitive data.
• Experience protecting licensed, proprietary, or customer-provided data and operationalizing contractual requirements around access and retention.
• Strong communication skills across founders, engineers, operations, legal, auditors, and customers.
• High agency, sound judgment, and ability to prioritize risks and make pragmatic decisions under uncertainty.
• Relevant certifications (OSCP, AWS Security Specialist, OSWE, CKS, GIAC) or demonstrated expertise through CVEs, security tooling, or bug bounty work.

Compensation & Benefits

Very competitive compensation package. Medical, dental, and vision coverage (100% covered for US employees). Lunch and dinner in office, company-wide holiday break, Equinox membership, 401k, and commuter benefits. Unlimited access to AI tools including ChatGPT, Claude, and Cursor.

Location

On-site in San Francisco Bay Area or Singapore. Visa sponsorship and relocation support provided for strong candidates.