3 months ago
Responsibilities
- Partner with engineering teams as an embedded security expert by writing code, reviewing architectures, and building secure application features and infrastructure components.
- Design and implement automated fraud detection, real-time monitoring, and remediation workflows for platform abuse, credential stuffing, and payment fraud.
- Own the strategy and execution for hardening AWS and Python infrastructure, including network security, cloud configuration, vulnerability management, and remediation workflows.
- Lead security controls for AI and agentic systems, including agentic coding and AI agent products.
- Oversee SOC 2 compliance operations through Drata, annual audit cycles, and planning for certifications such as ISO 27001.
- Provide oversight for platform abuse and content moderation and act as the escalation point for IT security incidents.
Requirements
- Strong software engineering background with hands-on Python and AWS experience.
- Experience securing cloud infrastructure and applications, including vulnerability management, network security, IAM, and secrets management.
- Familiarity with GRC frameworks and compliance programs such as SOC 2 or ISO 27001.
- Ability to communicate threat models, compliance requirements, and security architecture to engineers, auditors, and enterprise CISOs.
- Comfort with ambiguity and rapid scaling, including prioritizing and deciding when to build versus buy.
- Experience with modern security tooling such as Drata, Infisical, or Bugcrowd is a plus.
About HeyGen
HeyGen builds an AI video platform for businesses and creators to generate videos with avatars, text-to-speech, and translation across languages. Its web-based tools and APIs support use cases like marketing, training, and localization, offered as subscription software with add-ons for enterprise teams. Founded in 2020 and headquartered in Los Angeles, the company is privately held.