Security Engineer

3 hours ago

Responsibilities

Lead detection and incident response from alert investigation through postmortem and follow-up engineering improvements.
Own the security roadmap across product, cloud infrastructure, corporate security, incident response, and compliance.
Secure APIs, platforms, and data systems through threat modeling, design and code reviews, authentication, authorization, and secrets management.
Build and operate monitoring, detection, and incident-response capabilities.
Own SOC 2 compliance, security controls, customer trust processes, security questionnaires, vendor reviews, policies, and audits.
Translate data-license requirements into controls for access, provenance, retention, deletion, isolation, and auditability.
Partner with engineering, legal, commercial, operations, auditors, and customers on security requirements and risk decisions.

5+ years of hands-on security engineering experience across infrastructure, detection and response, and identity domains.
Experience leading security incidents end-to-end, including containment, root-cause analysis, and follow-up engineering.
Experience implementing or operating SOC 2 or a comparable security framework and translating requirements into technical controls.
Hands-on offensive security experience such as bug bounty, penetration testing, or red-team work.
Experience setting up and operating SIEM and/or XDR tooling for proactive detection.
Experience with abuse and fraud detection, solo incident response, and attack surface management.
Experience securing AI/ML infrastructure, agent execution environments, or data platforms handling untrusted or sensitive data.
Experience designing data protection controls covering access, retention, deletion, isolation, and auditability.
Relevant certifications such as OSCP, AWS Security Specialist, OSWE, CKS, or GIAC are preferred.
Systems programming or low-level engineering experience is a plus.
Prior experience as an early or sole security hire building a security program from scratch at a fast-growing startup is a strong advantage.
Strong communication, judgment, prioritization, and pragmatic decision-making skills.