Founding Security Engineer

Headline: Founding Security Engineer (Fully Remote, US)

Employment Type: Full-time

Location: Remote (US Only)

The Role: Your Chance to Build

We are looking for our first Founding Security Engineer. This is not a maintenance role; it’s a ground-floor opportunity to architect and build our security programs from scratch. You will own the entire security posture of a high-growth AI startup, protecting millions of daily API requests.

What You’ll Do: Own, Build, and Secure

• Build the Foundation: Develop and implement security programs, operations, and incident response playbooks from the ground up. You won’t be inheriting a playbook; you’ll be writing it.
• Hands-On Technical Security: Deploy and operate vulnerability scanners (e.g., Qualys, Tenable), manage our SIEM (e.g., Splunk, Panther), and drive remediation across our cloud infrastructure.
• Lead Compliance Efforts: Own the end-to-end process for critical frameworks like SOC 2, ISO 27001, and HIPAA. This includes handling external audits, maintaining documentation, and ensuring we meet compliance requirements without sacrificing speed.
• Bridge Engineering & Business: Serve as the key liaison between engineering and GTM teams. You will triage technical risks, guide security investments, and handle customer-facing vendor security questionnaires.
• Proactive Defense: Perform penetration tests, lead tabletop exercises, disaster recovery testing, and manage endpoint security tooling.

Who You Are: The Ideal Profile

We are looking for a builder with a specific blend of deep technical skill and operational pragmatism.

• Experience Level: 5+ years in Security Engineering or Operations (3-6 YOE considered, but 5+ is ideal for this founding role).
• Technical Depth: You are strong in cloud security and hands-on with Infrastructure as Code (Terraform). You understand the tech stack deeply (no application coding required, but you can read it).
• Compliance Expertise: You have working knowledge and experience with SOC 2, ISO 27001, HIPAA, and GDPR/CCPA.
• The "Big Tech + Startup" Mindset: If you’ve only worked at large companies, we want to see that you can operate without a massive support structure. We need someone who thrives in ambiguity and can build from the ground up. Experience at a startup is a huge plus.
• Operational Focus: You don’t just identify risks; you build the programs and processes to manage them. Your resume should show evidence of building security ops, not just participating in them.

Bonus Points (Highly Desired):

• Experience with AI/ML infrastructure or inference platforms.
• Scripting skills in Python for automation.
• Experience with healthcare data (BAA compliance).

Compensation & Logistics:

• Salary: Highly flexible for the right candidate
• Sponsorship: No sponsorship available.
• Location: Remote, US-based.

Interview Process:

1. Recruiter Screen
2. Hiring Manager
3. Virtual Onsite
4. Cofounder Round

Ready to build the security foundation for the future of AI? Apply below!

#SecurityEngineer #FoundingEngineer #Startup #Infosec #CloudSecurity #AISecurity #SOC2 #HIPAA #Terraform #RemoteWork