Lead Security Software Engineer

Lead Software Security Engineer

As the Lead Software Security Engineer at Twelve Labs, you will be at the forefront of pioneering efforts to fortify and uphold the security and compliance standards for our cutting-edge AI models. You will play a pivotal role in devising systems that prioritize security by conducting robust security evaluations, architecting resilient security infrastructure, cultivating secure-by-default frameworks, and embedding the principle of least privilege. You will have the unique opportunity to shape the direction and protocols for AI security, trailblazing new pathways in both an emergent field and a fresh, dynamic team.

You will:

• Secure Model Development Environment: Design and implement security measures throughout the model development cycle, from training data protection to safeguarding the training and deployment code. Ensure that the AI/ML pipelines are impervious to unauthorized access and potential breaches.
• Protection of Trained Model Weights: Develop strategies and controls to safeguard the weights of trained models.
• Security Policies & Procedures: Shape policies and procedures to embed security into product design, infrastructure, and employee practices.
• Secure Software Development Environment: Construct and maintain a security-centric software development environment, emphasizing safe coding practices and preempts potential security threats from inception.
• Customer Data Protection and Compliance: Architect rigorous protocols to safeguard customer data, ensuring our processes and products always align with leading compliance standards, including SOC2, GDPR, and ISO.
• Security Assessments & Fix Vulnerability: Regularly perform penetration testing and security audits to detect and remediate vulnerabilities, fortifying our commitment to unmatched system security.
• Secure Deployments: Drive the blueprint and rollout of watertight strategies for on-premise deployments. This will involve comprehensive licensing validation mechanisms, advanced code encryption and obfuscation, and model encryption to restrict unauthorized codebase access.

You may be a good fit if you:

• +10 years in the industry working on security, privacy, and engineering
• Experience building internal security tooling
• Established secure software and system development environments in the past.
• Knowledge of designing control and sandboxing systems for AI research
• Experience enforcing security policies in an organization
• Strong verbal and written communications and leadership skills

Desired Experience:

• Have supported fast-paced startup engineering teams
• Have solid understanding and practical experience with compliance frameworks like SOC2, GDPR, and ISO
• Care about AI safety risk scenarios