Own and advance security across cloud, AI, data, applications, IT, and incident response, building secure-by-default systems and automations that help employees move quickly while protecting patient data.
Security Engineer
📜 Description
- Conduct security reviews and threat modeling for new and existing product surfaces.
- Build and improve secure SDLC, detection, and response processes.
- Harden cloud and application infrastructure and remediate high-priority risks.
- Define safeguards for AI agents, including controls for data exposure, prompt injection, and abuse.
- Support SOC 2 compliance and customer-facing security needs.
- Partner with product and infrastructure engineering to embed security into development.
🛠️ Requirements
- 3+ years of hands-on information security experience.
- Strong application and/or cloud security fundamentals, including AWS or GCP.
- Startup or early-stage company experience and comfort with ambiguity, autonomy, and high ownership.
- Pragmatic risk prioritization, clear communication, and a collaborative working style.
- Nice to have: experience securing AI agents or LLM systems, or governing organizational AI agent use.
- Nice to have: enterprise compliance experience, such as SOC 2 or ISO 27001.
✨ Benefits
- Equity
- Generous perks
- Comprehensive benefits
Full job description
About Nooks.ai:
Nooks is an applied AI lab building the Agent Workspace for GTM. We design AI agents that operate across the full sales action set, from account strategy to prospect research and outreach. Building 0→1 has never been easier, but selling at the speed of the market remains the last frontier for AI. Our mission is to 10x every seller by automating the busywork so they can focus on what humans do best: closing deals.
Today, over 1,500 customers run on Nooks, including Notion, HubSpot, Cursor, and Rippling. We’ve raised $70M+ from top VCs like Kleiner Perkins, which made its first sales-tech investment in over a decade with us. Since then, we’ve tripled ARR each year for 3 years running and grown a high-caliber team turning the art of sales into a scalable science.
About the Role
Nooks is the Agent Workspace for Sales, where reps and AI agents execute and decide next moves together across 1M+ interactions per day. As our second security engineer, you'll help secure a fast-growing, AI-native platform and the customer data that flows through it — across a rapidly expanding set of product surfaces. This is a foundational, high-ownership role: you'll shape our security program from the ground up, including the novel challenge of securing AI agents and how they're used within organizations.
What You'll Do
Own security reviews and threat modeling for new and existing product surfaces.
Build and improve core security processes (secure SDLC, detection & response).
Harden our cloud and application infrastructure and drive remediation of high-priority risks.
Help define how we secure AI agents and govern their use — guardrails, data exposure, prompt-injection and abuse risks.
Support enterprise customer trust: compliance (SOC 2), and customer-facing security needs.
Partner closely with product and infra engineering to embed security into how we ship.
You might be a strong fit if:
3+ years of hands-on information security experience.
Experience at a startup or early-stage company; comfort with ambiguity, autonomy, and high ownership.
Strong fundamentals in application and/or cloud security (AWS/GCP).
Pragmatic judgment — able to prioritize risk and do more with less.
Clear communication and a collaborative, low-ego style.
Nice to haves
Experience securing AI agents / LLM systems or governing AI agent use within an organization.
Enterprise compliance experience (SOC 2, ISO 27001).
At Nooks You'll Enjoy
An early seat on a small, high-leverage security team. You'll be one of our first security hires and help build out the function — its standards, tooling, and threat models — owning whole domains end-to-end as Nooks scales across many more product surfaces, with a clear path to grow into a senior or lead role.
A world-class team to build it with. Around 70 engineers, mostly former founders or founding engineers and veteran builders from places like Applied Intuition, Scale, Airtable, Citadel, and Jane Street, with thirteen Olympiad medals across the team. You'll partner with them to make security a first-class part of how we ship.
Frontier security problems. Securing AI agents and how they operate inside organizations is largely unsolved territory — you'll help define how it's done.
Top-of-market compensation.
We offer competitive compensation because we want to hire the best people and reward them for their contributions to our mission. We pay all employees competitively relative to market. In compliance with pay transparency laws and in pursuit of pay equity and fairness, we publish salary ranges for our open roles. The target salary range for this role is $200,000 - $315,000. On top of base salary, we also offer equity, generous perks and comprehensive benefits.
Equal Employment Opportunity Statement
Nooks is an equal opportunity employer committed to fostering a diverse and inclusive workforce. We believe in providing equal employment opportunities to all individuals regardless of race, color, religion, gender, gender identity, sexual orientation, national origin, age, disability, veteran status, or any other characteristic protected by law.
Nooks does not discriminate in hiring, promotion, compensation, or any other employment practices, and we are committed to ensuring a workplace that is free from discrimination, harassment, and retaliation. We encourage individuals from all backgrounds to apply and join our team.
Similar jobs
Search more Cybersecurity Engineer jobsAs a Security Engineer, you will enhance the Security Logging & Monitoring Program, focusing on SOC monitoring, incident response, and optimizing security solutions in cloud environments.
As a Senior Cybersecurity Engineer, you will enhance Wabtec's cybersecurity program by designing and implementing protections for email, data, and endpoint platforms.
As a Product Security Engineer, you will partner with product and engineering teams to ensure secure software design, conduct security reviews, and develop frameworks that enhance security practices.
Cyber Security Consulting - Managed Cyber Services
Experienced cyber security consultants will strengthen security across complex IT and OT environments, providing practical advice and acting as a trusted authority on security controls.
