1 day ago
Base Salary
$200k - $250k/yr
Responsibilities
- Own technical security controls across the platform, cloud infrastructure, and corporate environment.
- Run and mature vulnerability management across infrastructure, applications, and dependencies, including triage, remediation targets, and exception handling.
- Triage findings from automated tools, bug bounty reports, and third-party assessments.
- Enforce least-privilege access and conduct regular access reviews across environments.
- Improve detection and monitoring with Infrastructure using log aggregation and SIEM tooling.
- Provide engineering evidence supporting continuous SOC 2 compliance.
- Support customer security reviews by answering technical questions from enterprise buyers.
- Lead post-incident reviews, drive systemic fixes, contribute to risk assessments, and help prioritize security work.
Requirements
- 5+ years of security engineering experience, including work in high-growth SaaS or infrastructure-heavy environments.
- Experience supporting or maintaining a SOC 2 program.
- Strong knowledge of AWS security services and cloud security architecture, including IAM, VPC, CloudTrail, GuardDuty, and Security Hub.
- Understanding of OAuth, SAML, and OIDC identity and authentication protocols.
- Python or Bash scripting skills for automating security workflows.
- Preferred qualifications include vulnerability management, SAST, DAST, SCA, container scanning, Terraform or CloudFormation security experience, network security knowledge, penetration testing or application security assessment experience, and familiarity with ClickHouse or PostgreSQL security.
- Relevant certifications such as CISSP, CCSP, or AWS Security Specialty are a plus.
- Strong communication, systems thinking, judgment, and ability to explain security risk to technical, leadership, and customer-facing audiences.
Benefits
- Expected base salary range is $200,000 to $250,000 in NYC, with additional equity, benefits, and perks.
- The role works cross-functionally with Engineering, Infrastructure, IT, and GRC teams; location-specific work details are not otherwise stated.
Tech Stack
Categories
About Profound
Profound builds a SaaS marketing intelligence platform that helps enterprise brands measure and improve how they appear in AI-driven discovery across tools like ChatGPT and Perplexity. The product delivers real-time visibility analytics, competitive intelligence, and optimization insights for search-like AI channels. The company is privately held, headquartered in New York, and is Series C–funded.