21 hours ago
Base Salary
$210k - $300k/yr
Responsibilities
- Identify, assess, and remediate security risks across AWS infrastructure, Terraform code, application architecture, and product code.
- Partner with engineering teams on secure system design, security reviews, cloud configuration, identity and access management, secrets management, vulnerability management, and infrastructure hardening.
- Lead technical investigations during security and privacy incidents, determining scope, impact, root cause, containment actions, and remediation.
- Analyze application, cloud, identity, network, audit, and infrastructure telemetry and improve logging and detection coverage.
- Design, implement, tune, and maintain SIEM detection rules and investigate platform security alerts.
- Coordinate external penetration tests, evaluate findings, plan remediation, validate fixes, and potentially own the testing program.
- Develop security tooling and automation to help engineers identify and address vulnerabilities earlier.
- Establish practical security standards and document technical risks and recommended actions for technical and non-technical stakeholders.
Requirements
- Hands-on experience in application security, cloud security, infrastructure security, or security-focused site reliability engineering.
- Production AWS security experience covering identity, networking, logging, data protection, and common cloud attack paths.
- Strong working knowledge of Terraform and infrastructure-as-code security practices.
- Ability to assess security across infrastructure and application layers, including application architecture and source-code vulnerabilities.
- Familiarity with application, API, authentication, authorization, and data-security risks.
- Experience investigating complex technical events with application logs, cloud telemetry, audit trails, and other security data.
- Experience writing, tuning, or responding to SIEM detection rules and distinguishing meaningful signals from noisy telemetry.
- Experience evaluating penetration-test findings and partnering with engineers on remediation.
- Strong scripting or software-development skills for security tools, automations, and integrations.
- Demonstrated proficiency with agentic software development.
- Sound judgment, communication skills, and a collaborative approach to balancing security, reliability, engineering effort, and product priorities.
- Preferred qualifications include security or privacy incident-response experience, technical investigation leadership, SANS FOR509 training or certification, purple teaming, penetration-testing program ownership, threat modeling, detection engineering, cloud forensics, security automation, and technical project management.
About Outset
Outset builds an AI‑moderated research platform that runs qualitative user interviews and automates analysis for product, UX, and marketing teams. Delivered as a SaaS platform, it helps organizations conduct discovery, concept, brand, and pricing research at scale. Founded in 2022 and headquartered in San Francisco, the privately held company counts customers such as Microsoft, Nestlé, Uber, and HubSpot.