Senior Security Engineer
About The Position
We're hiring a Senior Security Engineer in New York to own security and compliance across our IT and software development practices at the frontier of LLM-agentic product development. You'll join the platform technology organization as its primary security engineer, building and maintaining security infrastructure in GCP and across our sub-processors. Partnering closely with platform and product engineers, you'll keep our core deployed systems secure and well-tested, define internal security standards, and evaluate and audit the technologies the company adopts. In short, you'll enable us to move fast with emerging technology without compromising on security.
Requirements
- Strong Experience with Vanta and other SecOps platforms, setting up and maintaining those platforms.
- Experience with Cloud DevOps IaC platforms, preferably Terraform (we use OpenTofu).
- Experience auditing cloud-based LLM tools and running AI security audits.
- Experience working with IT procurement and security vetting.
- Strong understanding of SAML, SSO, SCIM, OIDC, and identify management platforms
- Strong understanding and opinions about security in the age of LLM-agent based software development
- Experience programming, building, and maintaining tooling and software for internal use
- Strong experience performing security-focused design and code reviews
- 5+ years of post-university (bachelor's degree) industry experience
- Experience working in a high-growth environment in a highly regulated industry, such as healthcare preferably, finance or defense.
Nice To Haves
- Led or managed SOCII and HITRUST security audit processes
- Helped manage relationships with security product vendors
- Experience with Google Security Command Center
- Experience with Auth0 and Okta
- Experience with Golang, Typescript, or Python
Responsibilities
- Manage SecOps software in GCP and Vanta.
- Continually monitor, analyze and improve our deployed software’s security posture
- Validate software is correct, secure, and maintains customer privacy
- Manage compliance standards and own the lifecycle of necessary diligence work
- Maintain a database of core security artifacts, document processes and help manage security work
- Build the data and AI governance framework for internal operations
- Select and audit technologies for use internally in operating the business
- Ensure we’re compliant with our contractual obligations beyond our opt-in and mandated security standards
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
