5-7 years of hands-on experience in security engineering, application security, or cloud security.
Expertise in AWS security, including IAM design and network controls.
Strong knowledge of application security principles and practices.
Proficiency in Python for automation and tooling.
Familiarity with compliance frameworks like NIST 800-53 or SOC 2.
Experience with container and Kubernetes security practices.
Ability to contribute to backend infrastructure tasks.
Responsibilities
Define and implement security architecture across the platform.
Conduct red team exercises on AI systems to identify vulnerabilities.
Manage continuous security monitoring and vulnerability management.
Oversee day-to-day security monitoring, triage incidents, and implement improvements.
Ensure compliance with NIST SP 800-53 and SOC 2 controls.
Benefits
Opportunity to shape security architecture from the ground up.
Engagement with cutting-edge AI and machine learning technologies.
Dynamic work environment with a focus on continuous improvement.
Potential for career growth in a rapidly evolving field.
Full Job Description
Core Responsibilities
Own the security architecture: define and implement how identity, authorization, tenancy isolation, encryption and audit logging work across our platform, and review designs before they become expensive to change
Red team our AI systems: probe the LLM and spatial reasoning surfaces the way an adversary would through prompt injection, jailbreaks, tool-use and agent abuse, retrieval and training data poisoning, model extraction, and the failure modes specific to grounding models in customer documents and 3D scenes..
Implement continuous security monitoring: own the security pipeline (SAST/DAST, dependency and container scanning, secrets detection, IaC policy checks) and the vulnerability management that follows from it.
Run detection and response: own the security monitoring pipeline day to day. Triage, investigation, containment and post-incident review. Be the person who gets paged, and make each incident produce a durable change: a new detection, a closed gap, a corrected runbook.
Make sure we're compliant: implement and evidence NIST SP 800-53 and SOC 2 controls, support FedRAMP and ATO efforts, and manage POA&M tracking and remediation.
Essential Skills & Experience
Strong experience in security engineering, application security or cloud security with hands-on implementation ownership, not purely policy or GRC.
Deep AWS security expertise: IAM design, VPC and network controls, KMS, GuardDuty/Security Hub, and least-privilege at scale.
Strong applied knowledge of application security: authN/authZ design, common vulnerability classes, secure code review, threat modeling.
Ability to write real code (Python) to automate controls, evidence collection and tooling.
Working knowledge of at least one major compliance framework (NIST 800-53/RMF, FedRAMP, SOC 2, or ISO 27001) and the practical work of evidencing controls.
Enough backend or infrastructure ability to be a genuine extra pair of hands outside security: shipping a service, writing a Terraform module, fixing a CI pipeline.
Clear communication with non-security engineers and with customer security teams alike.
Nice to Have
Federal authorization experience: running or supporting an ATO, working with AOs and ISSOs, FISMA continuous monitoring.
Certifications such as CISSP, OSCP, CCSP, CAP, or GIAC equivalents.
Experience securing ML/AI systems: model supply chain, data governance, prompt injection and inference abuse.
Familiarity with DISA STIGs, NIST 800-171, CMMC or CUI handling requirements.
Experience being the first security hire at a startup and building the function from zero.
Defense, aerospace, energy or other regulated-industry experience; active or ability to obtain U.S. security clearance.
Compensation
The salary range for this role is $175,000 - $254,000.
