Founding Security Infrastructure Engineer

Transparent Search Group•San Francisco, CA

4d•Hybrid

About The Position

Sela is seeking its first dedicated security hire, a Security Infrastructure Engineer with over 5 years of experience, to establish and lead the entire security and privacy program from scratch. This role will encompass cloud infrastructure, AI systems, and enterprise compliance. It's a hands-on, 0-to-1 position for an individual who has experience building or enhancing security at a rapidly growing startup. The successful candidate will be responsible for implementing systems and controls, rather than solely creating policy, while ensuring the development team's momentum is maintained.

Requirements

5+ years in cloud or infrastructure security engineering, ideally on AWS.
Experience building or owning cloud/infra security at a fast-growing startup or a company with a high engineering bar.
Deep cloud security knowledge: IAM, networking, encryption, secrets management.
Ability to clearly and structurally articulate security decisions under technical questioning.
Active use of AI tools in your workflow.
Based in San Francisco and able to work in the office at least 3 days a week.

Nice To Haves

Experience as one of the first security hires at a VC-backed startup.
Experience with SOC 2 Type II or similar compliance programs.
Deep application security expertise.
Experience with Terraform, Kubernetes, or CI/CD security tooling.
Experience securing AI/LLM applications or agent workflows.

Responsibilities

Build and own the security program end to end, including cloud infrastructure security, IAM, secrets management, and encryption and data isolation across AWS.
Own SOC 2 Type II compliance, including the observation period, vendor management, and internal policy adherence.
Design controls for internal AI agents' access to systems, ensuring auditing, protection against unauthorized access, and AI use policies.
Manage permissions and data protection for sensitive customer data (tokenization, anonymization, access) without hindering development.
Lead customer security reviews, manage third-party penetration testing, and evaluate the security posture of external tools.