Lead Security Engineer
About The Position
At Ai2, you'll be joining a team of top AI researchers and talented engineers who are pushing the boundaries of what's possible. We have projects spanning natural language processing, robotics, artificial assistants, and fully open foundational models. As a Security Engineer, you would be a key part of our core infrastructure team, with a unique opportunity to improve the security of our groundbreaking initiatives. If you join our team, you will lead our company’s security program: establishing how we conduct security evaluations of programs, auditing systems for security concerns, prioritizing security investments, and working across the company to reduce our security risks.
Requirements
- Bachelor's Degree and 8–10 years of overall software/infrastructure engineering experience.
- 5+ years focused specifically on security engineering, application security, or security architecture, ideally including time owning a security program.
- Hands-on experience conducting security and compliance audits, and directly implementing or assessing controls. For example, experience with NIST 800-171.
- A track record of stepping up to ambiguous, high-stakes problems rather than waiting for a fully scoped mandate — this role will require building a program largely from the ground up.
- Strong ability to advise non-security technical leaders (e.g., engineering directors/managers) — translating technical risk into clear, actionable recommendations they can act on without a security background.
- Must be able to remain in a stationary position for long periods of time.
- The ability to communicate information and ideas so others will understand. Must be able to exchange accurate information in these situations.
- The ability to observe details at close range.
- Can work under deadlines.
Responsibilities
- Establish and maintain documentation for Ai2's organizational approach to security, including policies, standards, and system security plans (SSPs).
- Maintain and prioritize a backlog of security investments.
- Conduct in-depth security assessments to identify and mitigate vulnerabilities across cloud infrastructure, ML pipelines, and application code.
- Investigate and respond to security incidents, lead root-cause analysis, and drive remediation to closure.
- Build systems and tooling that improve security compliance, observability, and governance (e.g., audit logging, access control, vulnerability management, configuration baselines).
- Partner across research and engineering teams to address security concerns.
- Define and evolve security standards, secure-development practices, and documentation to raise the organization's overall security maturity.
- Evaluate and secure SaaS platforms and tools that make up our environment (vendor risk assessments, access reviews, data handling review, multi-tenant data isolation).
- Serve as the organization's trusted voice on security: act as a hands-on advisor and sounding board to organizational leaders, helping translate security risk into practical, actionable guidance for teams without deep security expertise.
Benefits
- Medical, dental, vision, and an employee assistance program.
- Health savings account plan.
- Healthcare reimbursement arrangement plan.
- Health care and dependent care flexible spending account plans.
- Company’s 401k plan.
- $125 per month to assist with commuting or internet expenses.
- $200 per month for fitness and wellbeing expenses.
- Up to ten sick days per year.
- Up to seven personal days per year.
- Up to 20 vacation days per year.
- Twelve paid holidays throughout the calendar year.
- Annual bonuses.
- Long-term incentive plan.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
