5 months ago
Responsibilities
- Own the detection and response layer and cloud infrastructure security foundation to support SOC 2 Type II audit readiness by Q4 2026.
- Remediate credential exposure across AWS and GCP, deploy and tune CSPM, add Checkov and Terraform security gates, and implement Zero Standing Privileges through JIT and CIEM.
- Deploy the SIEM platform and author more than 30 MITRE ATT&CK-mapped detection rules across cloud, endpoint, and SaaS telemetry.
- Own the incident response lifecycle, develop playbooks for at least four incident categories, lead P1/P2 response, and drive MTTD to 60 minutes or less.
- Maintain SOC 2 operational evidence covering log retention, alert records, control reviews, and control narratives for Cloud Security and SecOps.
- Publish security and risk governance reports and maintain at least 90% vulnerability SLA compliance with remediation tracking.
Requirements
- 5+ years of hands-on security engineering experience with depth in cloud security or security operations and working fluency in the other area.
- Ability to build security infrastructure from zero, including tool selection, baseline configuration, and policy definition.
- Strong knowledge of MITRE ATT&CK, CIS Benchmarks L1/L2, cloud-native security tooling, and cloud and endpoint log-source integration.
- Familiarity with SOC 2 Type II controls, including CC6, CC7, and third-party auditor evidence standards.
- Regular use of LLMs for security workflows such as alert summarization, detection generation, SOAR playbook drafting, or IaC policy automation.
Benefits
- Employee Stock Ownership Plan (ESOP).
- Access to AI productivity tools including Cursor, GPT models, Gemini, and Claude.
- Top-spec laptops, high-performance workstation setups, and Plaud devices for new hires.
- Annual company offsites and team events.
- Market-competitive compensation and global exposure.
Tech Stack
Categories
About Plaud
Plaud builds AI-powered hardware devices and companion apps that capture, transcribe, and summarize meetings and other conversations for professionals. The company sells its consumer electronics and meeting software directly, with subscription services layered on its devices and cloud platform. Founded in 2021 and headquartered in San Francisco, Plaud is privately held and lists SOC 2, HIPAA, GDPR, and ISO 27001/27701 compliance.