Security Engineer

Chai Discovery•San Francisco, CA

44d

About The Position

Security is what earns Chai the trust of the world's largest pharma companies. It's a precondition for the business, not a cost center. We're looking for someone to help own and build the security function end to end. You'll represent Chai's security posture to our partners directly, sitting across from their CISOs and cloud security architects on reviews of our compute architecture, tenant isolation, egress controls, encryption, and key management. You'll drive the changes they surface back into the product and infrastructure and help Chai keep ahead of new risks. Just as importantly, you'll be the trusted security partner to our product and inference engineers, reviewing architecture like our shared inference fleets and per-partner data isolation before they're built, shipping the security controls that are tricky for non-specialists to get right, and automating the compliance, onboarding, and vendor work so the program mostly runs itself. Our models have moved beyond structure prediction into real therapeutic engineering, and the partnerships that come with that raise the bar every quarter. You'll do this alongside a craft-obsessed team of micro-pessimists and macro-optimists.

Requirements

5+ years in security engineering.
Experience building or meaningfully improving a security program at a high-growth company.
Ability to write targeted production code (Python, TypeScript).
Startup or high-growth experience, working close to engineering.
Credibility and presence to represent Chai on customer security calls with pharma CISOs.
Familiarity with SOC 2 and ISO 27001 as programs to run well.

Nice To Haves

Life sciences or other regulated-industry experience.
A background in biology.

Responsibilities

Own and build the security function end to end.
Represent Chai's security posture to partners directly, engaging with CISOs and cloud security architects.
Review compute architecture, tenant isolation, egress controls, encryption, and key management.
Drive security-related changes into product and infrastructure.
Act as a trusted security partner to product and inference engineers.
Review architecture for shared inference fleets and per-partner data isolation.
Implement security controls that are difficult for non-specialists.
Automate compliance, onboarding, and vendor processes.
Manage detection, response, and incident management end to end.