5+ years of hands-on security engineering experience in infrastructure security or related areas.
Proven experience leading incident detection and response from start to finish.
Familiarity with SOC 2 or similar security frameworks and translating requirements into actionable controls.
Experience securing AI or machine learning infrastructure and handling sensitive data.
Proficient with SIEM or XDR tools, threat modeling, and data protection controls.
Background in offensive security practices like penetration testing or vulnerability research.
Strong communication skills for collaboration with diverse teams.
Responsibilities
Lead incident detection and response from alert to postmortem and improvements.
Develop a comprehensive security roadmap across various domains.
Secure APIs and data systems through threat modeling and code reviews.
Build and operate monitoring and incident response capabilities.
Manage SOC 2 compliance and customer trust initiatives.
Collaborate with cross-functional teams to implement data controls.
Benefits
Visa sponsorship available for qualified candidates.
Relocation support offered for new hires.
Full Job Description
About the Role
As the first full-time security engineer at an early-stage AI infrastructure company, you will build and operate the security program from the ground up. You will work across product, infrastructure, compliance, and incident response to protect AI systems and sensitive data while supporting customer trust. What You'll Do
Lead incident detection and response from initial alert through investigation, postmortem, and lasting engineering improvements.
Develop the security roadmap across product, cloud infrastructure, corporate security, incident response, and compliance.
Secure APIs, platforms, and data systems through threat modeling, design and code reviews, identity controls, and secrets management.
Build and operate monitoring, SIEM or XDR detection, and incident response capabilities, and investigate emerging threats.
Own SOC 2 and customer trust work, including control design, security questionnaires, policy management, vendor reviews, and audits.
Partner with legal, commercial, engineering, and operations teams to implement data access, provenance, permitted use, retention, deletion, isolation, and auditability controls.
What We're Looking For
At least 5 years of hands-on security engineering experience in infrastructure security, detection, incident response, identity, or related areas.
Experience leading incidents from detection and containment through root-cause analysis and follow-up work.
Experience implementing or operating SOC 2 or a comparable security framework and translating requirements into technical and operational controls.
Experience securing AI or machine learning infrastructure, agent execution environments, data platforms, or systems that handle untrusted or sensitive data.
Experience with SIEM or XDR tooling, attack surface monitoring, threat modeling, authentication and authorization, and data protection controls.
Offensive security experience, such as penetration testing, red teaming, bug bounty work, or vulnerability research, alongside recent hands-on engineering work.
Strong communication and judgment when working with engineers, legal teams, auditors, customers, and operations.
Compensation & Benefits
Annual salary range: $130,000 to $225,000 USD. Visa sponsorship is available, with relocation support for qualified candidates. Location
On-site in San Francisco, California, United States.
