5 hours ago
Responsibilities
- Lead detection and incident response from initial signal through alerting, containment, investigation, postmortem, and follow-up engineering work.
- Own the security roadmap across product security, cloud and infrastructure security, corporate security, incident response, and compliance.
- Secure HUD’s APIs, platform, and data systems through threat modeling, design and code reviews, authentication and authorization controls, and secrets management.
- Build monitoring, detection, and incident-response capabilities and convert incidents and emerging threats into durable security improvements.
- Own SOC 2 and customer trust, including control design, security questionnaires, policy management, vendor reviews, and audits.
- Partner with legal, commercial, engineering, and operations to enforce requirements for data access, provenance, permitted use, retention, deletion, isolation, and auditability.
Requirements
- Strong security engineering fundamentals and hands-on experience across areas such as infrastructure security, detection and response, and identity.
- Experience leading security incidents end-to-end, from detection and containment through root-cause analysis and follow-up engineering.
- Experience implementing or operating SOC 2 or a comparable security framework and translating requirements into technical and operational controls.
- Ability to identify and prioritize material risks, make pragmatic decisions under uncertainty, and drive implementation personally.
- Strong communication skills for working with founders, engineers, operations, legal teams, auditors, customers, and external partners.
- Preferred experience includes being an early security hire, building a security program from scratch, securing AI/ML infrastructure or systems that run untrusted code, protecting licensed or customer-provided data, finding CVEs, creating security tooling on GitHub, participating in bug bounty programs, giving conference talks, or writing about security incidents.
- Preferred certifications include OSCP, AWS Security Specialist, OSWE, CKS, or GIAC certifications.
- The company prioritizes technical aptitude and learning potential over a specific number of years of experience.
Benefits
- Full-time, on-site employment in the San Francisco Bay Area or Singapore.
- Support for relocation and visas for strong full-time candidates to the US or Singapore.
- Very competitive compensation.
- 100% company-covered medical, dental, and vision insurance through Blue Shield of CA for US employees.
- Lunch and dinner when working in the office.
- Company-wide holiday break from Christmas Eve through New Year’s Day, in addition to PTO and paid holidays.
- Equinox membership, 401k, and commuter benefits for US employees.
- Unlimited practical access to tokens for ChatGPT, Claude Code, and Cursor.
- Hiring process includes two technical interviews and a 2–3 day work trial; applications are rolling.
About HUD
HUD builds infrastructure for generating reinforcement-learning training data and evaluations for frontier AI agents, plus a marketplace where labs can buy and sell these assets. Its platform is used by frontier labs, Fortune 500 companies, and startups to create RL environments and post‑training datasets for RFT. Founded in 2025 and based in San Francisco, the company is privately held and a Y Combinator W25 alum.