Senior Security Engineer

About the role

We're hiring a Senior Security Engineer in New York to own security and compliance across our IT and software development practices at the frontier of LLM-agentic product development. You'll join the platform technology organization as its primary security engineer, building and maintaining security infrastructure in GCP and across our sub-processors.

Partnering closely with platform and product engineers, you'll keep our core deployed systems secure and well-tested, define internal security standards, and evaluate and audit the technologies the company adopts. In short, you'll enable us to move fast with emerging technology without compromising on security.

What you'll do

• Manage SecOps software in GCP and Vanta.
• Continually monitor, analyze and improve our deployed software's security posture
• Validate software is correct, secure, and maintains customer privacy
• Manage compliance standards and own the lifecycle of necessary diligence work
• Maintain a database of core security artifacts, document processes and help manage security work
• Build the data and AI governance framework for internal operations
• Select and audit technologies for use internally in operating the business
• Ensure we're compliant with our contractual obligations beyond our opt-in and mandated security standards

Must-haves

• Strong Experience with Vanta and other SecOps platforms, setting up and maintaining those platforms.
• Experience with Cloud DevOps IaC platforms, preferably Terraform (we use OpenTofu).
• Experience auditing cloud-based LLM tools and running AI security audits.
• Experience working with IT procurement and security vetting.
• Strong understanding of SAML, SSO, SCIM, OIDC, and identify management platforms
• Strong understanding and opinions about security in the age of LLM-agent based software development
• Experience programming, building, and maintaining tooling and software for internal use
• Strong experience performing security-focused design and code reviews
• 5+ years of post-university (bachelor's degree) industry experience
• Experience working in a high-growth environment in a highly regulated industry, such as healthcare preferably, finance or defense.

Nice-to-haves

• Led or managed SOCII and HITRUST security audit processes
• Helped manage relationships with security product vendors
• Experience with Google Security Command Center
• Experience with Auth0 and Okta
• Experience with Golang, Typescript, or Python

Education

Bachelor's degree (or higher).

Location

• Union Square, New York City. In-office 4 days per week.
• Anticipated compensation: $180,000 - $250,000 with Equity