JOB-1585

An early-stage startup building a conversational voice AI product is hiring its first dedicated security engineer. The person who joins will design the company’s security and privacy practice from nothing and personally build the controls, rather than only writing policy documents.

Your focus

  • Stand up and run the security program end to end, covering cloud infrastructure hardening, identity and access, secrets handling, encryption and tenant data separation on AWS
  • Lead the company’s SOC 2 Type II effort, including the audit window, outside vendors and day-to-day adherence to internal policy
  • Define policy and controls governing the way in-house AI agents get into company systems, including audit trails and an acceptable-use policy
  • Decide how sensitive customer data is tokenized or anonymized and who may see it, without slowing engineers down
  • Answer customer security questionnaires, coordinate external penetration tests and vet third-party tools before they are approved

About you

  • Five or more years in cloud or infrastructure security, preferably on AWS
  • A background as an infrastructure, platform or backend engineer who has owned security hands-on, such as IAM, secrets and network controls
  • Infrastructure-as-code fluency with Terraform, Kubernetes and CI/CD pipelines
  • At least one stint at a startup or mid-size company, ideally as an early security hire
  • Clear, structured reasoning when explaining security tradeoffs, plus regular use of AI tools in your own work
  • Bonus: SOC 2 exposure and experience securing LLM applications or agent workflows

Hybrid in the San Francisco Bay Area. Visa transfers are considered.