Security Engineer

About the Role

As the first full-time security engineer, you will build and operate the security program for an AI infrastructure company. You will work across product, infrastructure, compliance, and incident response to protect sensitive data and maintain customer trust.

What You'll Do

• Lead detection and incident response from initial alert through investigation, containment, postmortem, and follow-up engineering work.
• Own the security roadmap across product, cloud infrastructure, corporate security, incident response, and compliance.
• Secure APIs, platforms, and data systems through threat modeling, design and code reviews, access controls, and secrets management.
• Build and operate monitoring, SIEM or XDR detection, and incident-response capabilities, turning threats into lasting improvements.
• Manage SOC 2 or comparable compliance work, including control design, security questionnaires, policies, vendor reviews, and audits.
• Partner with legal, commercial, engineering, and operations teams to implement data access, provenance, use, retention, deletion, isolation, and auditability controls.
• Monitor the attack surface, including domains and third-party hosting infrastructure, and support abuse and fraud investigations.

What We're Looking For

• At least 5 years of hands-on security engineering experience, including recent individual-contributor work in detection, incident response, or infrastructure security.
• Demonstrated ownership of security incidents end-to-end and experience building a security function or program from the ground up.
• Experience operating SOC 2 or a comparable framework and translating requirements into technical and operational controls.
• Offensive security experience such as penetration testing, red teaming, or bug bounty work, with practical knowledge of attack surface management.
• Experience with SIEM or XDR tools, threat modeling, authentication and authorization, secrets management, and API security.
• Background securing AI/ML infrastructure, agent execution environments, data platforms, or systems handling sensitive or untrusted data.
• Experience working with legal teams, auditors, and customers on security policies, questionnaires, and audits.
• Strong communication, independent judgment, and ability to prioritize risk in a fast-moving environment.