Security Engineer

OpenRouter

8d

About The Position

We're hiring our first Security Engineer to own the process of safeguarding our systems, infrastructure, applications, and data. As the first security hire, you will build out our security operations and vulnerability management process for our AI gateway platform. You'll implement programs, run tooling, ship security fixes, and drive remediation across our stack. You’ll be responsible for all aspects of ensuring the security of our platform and users. This isn't a compliance paperwork role; it's a hands-on security position with direct impact on how we protect millions of API requests daily. You'll work closely with engineering and senior leadership to ship security improvements that actually matter.

Requirements

• 3-5+ years in security engineering or operations.
• Deep knowledge of cloud security and expertise in operating in a cloud-hosted environment.
• Comfortable in compliance-heavy environments (SOC 2, ISO 27001, HIPAA).
• Strong experience with SIEM platforms (Splunk, Elastic, Panther) and vulnerability scanners (e.g. Qualys, Tenable, Rapid7).
• AI-forward with hands-on experience adopting, leveraging, and integrating AI tools.
• Startup mindset; you thrive building programs from the ground up and not just inheriting existing playbooks.
• Pragmatic and business-oriented, able to balance security rigor and business speed.
• Ability to communicate risk and technical ideas clearly to both technical and non-technical audiences.

Nice To Haves

• Experience with AI/ML infrastructure or inference platforms.
• Automation and scripting with Python.
• Healthcare data handling or BAA compliance experience.

Responsibilities

• Deploy and operate vulnerability scanning across our cloud infrastructure. Triage findings and drive remediation with engineering teams.
• Lead security assessments for internal and customer security needs (e.g. SOC 2 Type II, ISO 27001, HIPAA audits).
• Maintain vulnerability and remediation documentation for auditors.
• Act as a liaison between product, engineering, compliance, and GTM to guide and prioritize the right security investments.
• Perform penetration tests, tabletop exercises, DR testing, and incident response.
• Manage endpoint security tooling as we scale; conduct audit log reviews and maintain visibility across our stack.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 1-10 employees