2 days ago
Base Salary
$130k - $225k/yr
Responsibilities
- Lead incident detection and response from initial signal through investigation, postmortem, and lasting engineering improvements.
- Own the security roadmap across product security, cloud infrastructure, corporate security, incident response, and compliance.
- Secure APIs, platforms, and data systems through threat modeling, design and code reviews, access controls, and secrets management.
- Build monitoring and detection capabilities using SIEM or XDR tooling and translate emerging threats into practical improvements.
- Lead SOC 2 or comparable compliance work, including control design, security questionnaires, policy management, vendor reviews, and audits.
- Partner with legal, engineering, operations, and commercial teams on data access, provenance, retention, deletion, isolation, and auditability controls.
Requirements
- At least 5 years of hands-on security engineering experience, including detection, incident response, and infrastructure security.
- Experience leading security incidents from detection and containment through root-cause analysis and follow-up work.
- Experience implementing or operating SOC 2 or a comparable security framework and translating requirements into technical and operational controls.
- Experience with offensive security such as penetration testing, red teaming, bug bounty work, or vulnerability research.
- Background securing AI or machine learning infrastructure, agent execution environments, data platforms, or systems handling untrusted or sensitive data.
- Experience with attack surface management, SIEM or XDR, threat modeling, authentication and authorization, secrets management, and data protection controls.
- Ability to build a security function from the ground up while remaining hands-on and working with customers, auditors, and legal teams.
Benefits
- Annual salary range of $130,000 to $225,000 USD.
- Visa sponsorship and relocation support are available.
- On-site in San Francisco, California; Singapore is also listed as a potential work location.