Security Engineer

4 hours ago

Responsibilities

Lead detection and incident response from initial alert through investigation, postmortem, and engineering improvements.
Own the security roadmap across product security, cloud and infrastructure security, corporate security, incident response, and compliance.
Secure APIs, platforms, and data systems through threat modeling, design and code reviews, authentication and authorization, and secrets management.
Build and operate monitoring, detection, and incident-response capabilities.
Own SOC 2 compliance, including control design, security questionnaires, policy management, vendor reviews, and audits.
Translate data-license requirements into controls for access, provenance, retention, deletion, isolation, and auditability.

5+ years of hands-on security engineering experience across infrastructure, detection and response, and identity.
Proven ability to lead security incidents end-to-end, including containment, root-cause analysis, and follow-up engineering.
Experience implementing or operating SOC 2 or a comparable security framework and translating requirements into technical controls.
Experience securing AI/ML infrastructure, agent execution environments, data platforms, or systems handling untrusted or sensitive data.
Experience designing and implementing data protection controls for access, retention, deletion, isolation, and auditability.
Experience working with legal teams, auditors, and customers on security questionnaires, policy management, and audit processes.
Strong communication skills and sound judgment when prioritizing risks and making pragmatic decisions under uncertainty.
Relevant certifications such as OSCP, AWS Security Specialist, OSWE, CKS, or GIAC, or demonstrated expertise through CVEs, security tooling, or bug bounty work, are preferred.