4 hours ago
Responsibilities
- Own security across browser environments, credentials, secrets, customer data, and internal data.
- Define and implement data-handling, access-control, and enterprise security standards.
- Own the compliance program, including ISO 27001, ISO 42001, and SOC 2 Type II controls and evidence.
- Threat-model realtime voice, vision, browser-use, and Brain product surfaces and establish preventative engineering systems.
- Manage CVEs and contribute code fixes in collaboration with engineering.
- Build detection, logging, and incident-response systems.
- Engage with customers’ security teams and lead security discussions.
Requirements
- Experience in cloud infrastructure security, including Kubernetes, IAM, network isolation, and secrets management.
- Ability to implement fixes directly rather than only identifying findings and to align controls with real risk.
- Ability to lead conversations with customer security teams.
- Preferred experience securing multi-tenant or sandboxed browser/computer-use systems.
- Preferred experience running compliance audits.
- Preferred experience with LLM agent risks such as prompt injection and data exfiltration.