Security Engineer
Role Overview
As the first full-time security engineer, you will build and operate the security program for an AI infrastructure company. You will work across product, infrastructure, compliance, and incident response to protect sensitive data and maintain customer trust.
Full Job Posting
About the Role
As the first full-time security engineer, you will build and operate the security program for an AI infrastructure company. You will work across product, infrastructure, compliance, and incident response to protect sensitive data and maintain customer trust.
What You'll Do
Lead detection and incident response from initial alert through investigation, containment, postmortem, and follow-up engineering work.
Own the security roadmap across product, cloud infrastructure, corporate security, incident response, and compliance.
Secure APIs, platforms, and data systems through threat modeling, design and code reviews, access controls, and secrets management.
Build and operate monitoring, SIEM or XDR detection, and incident-response capabilities, turning threats into lasting improvements.
Manage SOC 2 or comparable compliance work, including control design, security questionnaires, policies, vendor reviews, and audits.
Partner with legal, commercial, engineering, and operations teams to implement data access, provenance, use, retention, deletion, isolation, and auditability controls.
Monitor the attack surface, including domains and third-party hosting infrastructure, and support abuse and fraud investigations.
What We're Looking For
At least 5 years of hands-on security engineering experience, including recent individual-contributor work in detection, incident response, or infrastructure security.
Demonstrated ownership of security incidents end-to-end and experience building a security function or program from the ground up.
Experience operating SOC 2 or a comparable framework and translating requirements into technical and operational controls.
Offensive security experience such as penetration testing, red teaming, or bug bounty work, with practical knowledge of attack surface management.
Experience with SIEM or XDR tools, threat modeling, authentication and authorization, secrets management, and API security.
Background securing AI/ML infrastructure, agent execution environments, data platforms, or systems handling sensitive or untrusted data.
Experience working with legal teams, auditors, and customers on security policies, questionnaires, and audits.
Strong communication, independent judgment, and ability to prioritize risk in a fast-moving environment.
Compensation & Benefits
Base salary: $130,000 to $225,000 USD annually. Visa sponsorship and relocation support are available for strong candidates.
Location
- On-site in San Francisco, California. The role is also available on-site in Singapore.
Qualifications
- At least 5 years of hands-on security engineering experience, including recent individual-contributor work in detection, incident response, or infrastructure security.
- Demonstrated ownership of security incidents end-to-end and experience building a security function or program from the ground up.
- Experience operating SOC 2 or a comparable framework and translating requirements into technical and operational controls.
- Offensive security experience such as penetration testing, red teaming, or bug bounty work, with practical knowledge of attack surface management.
- Experience with SIEM or XDR tools, threat modeling, authentication and authorization, secrets management, and API security.
- Background securing AI/ML infrastructure, agent execution environments, data platforms, or systems handling sensitive or untrusted data.
- Experience working with legal teams, auditors, and customers on security policies, questionnaires, and audits.
- Strong communication, independent judgment, and ability to prioritize risk in a fast-moving environment.
- Compensation & Benefits
- Base salary: $130,000 to $225,000 USD annually. Visa sponsorship and relocation support are available for strong candidates.
- Location
- On-site in San Francisco, California. The role is also available on-site in Singapore.
Responsibilities
- Lead detection and incident response from initial alert through investigation, containment, postmortem, and follow-up engineering work.
- Own the security roadmap across product, cloud infrastructure, corporate security, incident response, and compliance.
- Secure APIs, platforms, and data systems through threat modeling, design and code reviews, access controls, and secrets management.
- Build and operate monitoring, SIEM or XDR detection, and incident-response capabilities, turning threats into lasting improvements.
- Manage SOC 2 or comparable compliance work, including control design, security questionnaires, policies, vendor reviews, and audits.
- Partner with legal, commercial, engineering, and operations teams to implement data access, provenance, use, retention, deletion, isolation, and auditability controls.
- Monitor the attack surface, including domains and third-party hosting infrastructure, and support abuse and fraud investigations.
- At least 5 years of hands-on security engineering experience, including recent individual-contributor work in detection, incident response, or infrastructure security.
- Demonstrated ownership of security incidents end-to-end and experience building a security function or program from the ground up.
- Experience operating SOC 2 or a comparable framework and translating requirements into technical and operational controls.
- Offensive security experience such as penetration testing, red teaming, or bug bounty work, with practical knowledge of attack surface management.
- Experience with SIEM or XDR tools, threat modeling, authentication and authorization, secrets management, and API security.
- Background securing AI/ML infrastructure, agent execution environments, data platforms, or systems handling sensitive or untrusted data.
- Experience working with legal teams, auditors, and customers on security policies, questionnaires, and audits.
- Strong communication, independent judgment, and ability to prioritize risk in a fast-moving environment.
- Base salary: $130,000 to $225,000 USD annually. Visa sponsorship and relocation support are available for strong candidates.
- On-site in San Francisco, California. The role is also available on-site in Singapore.
About Clera
AI-powered talent agent matching candidates to startup roles.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Clera
Robotics Engineer, Autonomous Systems
Indianapolis, USA
About the Role Join an engineering and R&D team developing autonomous drone delivery systems. You will design, integrate, and test robotic systems from prototype through field validation, helping enable safe and reliable
Account Executive
, USA
About the Role A growing AI-powered recruiting company is hiring an Account Executive to own the full B2B sales cycle, from discovery through close. You will work with the sales development team and help scale the go-to-
Operations Intern
, USA
About the Role Join the operations team at a technology company working in AI-powered recruiting. You will coordinate candidates and hiring managers from introductions through interviews, helping keep the hiring process
Robotics Engineer, Autonomous Systems
Indianapolis, USA
Account Executive
, USA
Operations Intern
, USA
Account Executive
Chicago, USA
Sales Development Representative
Salt Lake City, USA
Founding Product Engineer
San Francisco, USA
Technical Strategist
San Francisco, USA
Account Executive
Salt Lake City, USA