Design and implement security for research infrastructure across multiple clouds, hardening CI/CD, automated research agents, compute environments, and data handling while enabling secure collaboration with frontier AI labs.
Senior Security Engineer
📜 Description
- Secure AWS and GCP environments by remediating credential exposure, deploying CSPM, adding IaC security gates to CI/CD, and implementing just-in-time access.
- Deploy a SIEM and create 30+ MITRE ATT&CK-mapped detection rules across cloud, endpoint, and SaaS telemetry.
- Own incident response end to end, including playbooks for at least four incident categories and cross-functional response to P1/P2 events.
- Maintain SOC 2 Type II operational evidence, including log retention, alert records, control reviews, and written control narratives.
- Report security posture and risk to leadership, and track vulnerability remediation against SLA targets.
🛠️ Requirements
- 5-8 years of hands-on security engineering experience with demonstrable depth in at least one of: cloud security (AWS/GCP, CSPM, IAM, IaC) or security operations (SIEM, IR, SOAR, detection engineering) — and working fluency in the other.
- Proven ability to build security infrastructure from zero: tool selection, baseline configuration, and policy definition without inheriting a mature program or existing runbook.
- Strong working knowledge of MITRE ATT&CK, CIS Benchmarks (L1/L2), cloud-native security tooling (AWS Security Hub, GCP SCC, or equivalent CSPM), and log source integration across cloud and endpoint layers.
- Familiarity with SOC 2 TII control requirements — specifically CC6 (logical access), CC7 (monitoring & detection), and the operational evidence standards expected by a third-party auditor.
- Routinely uses LLMs as part of daily security workflow — alert summarization, detection rule generation, SOAR playbook drafting, or IaC policy automation. Will demo last-2-weeks AI usage during interview.
✨ Benefits
- Meaningful Ownership An Employee Stock Ownership Plan (ESOP) that gives a real stake in Plaud’s long-term success.
- Competitive Compensation: $175K-$278K base salary+performance bonus+Equity.
- Cutting-Edge AI Tools for Productivity Access to best-in-class AI tools, including Cursor, GPT models, Gemini, Claude, and other frontier AI systems to maximize engineering and execution efficiency.
- Best-in-Class Equipment Choice of top-spec laptops, high-performance workstation setups, and cutting-edge Plaud devices for all new hires.
- Team & Culture Annual company offsites, team events, and a culture that values craftsmanship, ownership, and velocity.
Full job description
About Plaud Inc.
Plaud is building the real-world AI interface for professionals to amplify intelligence, elevate productivity and performance, loved by over 3,000,000 users worldwide since 2023. With a mission to amplify human intelligence, Plaud captures, structures, and compounds the intelligence generated in conversations — so humans can think better, decide faster, and execute with clarity.
Plaud Inc. is a Delaware-incorporated, San Francisco-based company. With GDPR, SOC 2 Type II, HIPAA, and EN 18031 compliance, Plaud is committed to the highest standards of data security and privacy protection.
To learn more about Plaud, please visit https://www.plaud.ai and follow along on Instagram, X, Facebook, Linkedin, and YouTube.
Why You Should Join Us
Plaud is building the next generation intelligence infrastructure and interfaces to capture, extract, and utilize intelligence from what people say, hear, see, and think.
Plaud is a bootstrapped, skyrocketing, profitable company with a $300M revenue run rate achieved in just three years.
Define the next-gen paradigm for human-AI interaction.
Gain exposure to cutting-edge AI for Pro tools and play a direct role in our global expansion.
Work with passionate teammates who value innovation, collaboration, and customer success.
Grow your career in a culture that champions continuous learning and fast career development.
Market-competitive compensation, global exposure, and a vibrant, creativity-fueled work atmosphere.
What you will do
You will own both the detection & response layer and the cloud infrastructure security foundation at Plaud — two domains that must operate in lockstep to deliver SOC 2 Type II audit readiness by Q4 2026.
Cloud & Infrastructure Security — Remediate credential exposure across AWS/GCP production environments, deploy and tune CSPM across all accounts, embed IaC security gates (Checkov/Terraform) into CI/CD, and implement Zero Standing Privileges via JIT/CIEM.
SIEM Build & Detection Engineering — Deploy the SIEM platform and author 30+ MITRE ATT&CK-mapped detection rules spanning cloud telemetry, endpoint, and SaaS — with ongoing tuning to reduce false positives and maintain coverage fidelity.
Incident Response — Own the IR lifecycle end-to-end: develop playbooks across a minimum of 4 incident categories, lead cross-functional response for P1/P2 events, and drive MTTD to ≤60 minutes.
SOC 2 TII Operational Evidence — Produce and maintain the continuous evidence package required for audit — log retention, alert records, control review cadences, and written control narratives for Cloud Security and SecOps domains.
Security Reporting & Risk Governance — Publish monthly security reports to leadership, deliver H1 risk governance reports, and maintain vulnerability SLA compliance ≥90% with clear remediation tracking.
Skills, qualifications and experience we look for
5-8 years of hands-on security engineering experience with demonstrable depth in at least one of: cloud security (AWS/GCP, CSPM, IAM, IaC) or security operations (SIEM, IR, SOAR, detection engineering) — and working fluency in the other.
Proven ability to build security infrastructure from zero: tool selection, baseline configuration, and policy definition without inheriting a mature program or existing runbook.
Strong working knowledge of MITRE ATT&CK, CIS Benchmarks (L1/L2), cloud-native security tooling (AWS Security Hub, GCP SCC, or equivalent CSPM), and log source integration across cloud and endpoint layers.
Familiarity with SOC 2 TII control requirements — specifically CC6 (logical access), CC7 (monitoring & detection), and the operational evidence standards expected by a third-party auditor.
Routinely uses LLMs as part of daily security workflow — alert summarization, detection rule generation, SOAR playbook drafting, or IaC policy automation. Will demo last-2-weeks AI usage during interview.
What we offer
Meaningful Ownership An Employee Stock Ownership Plan (ESOP) that gives a real stake in Plaud’s long-term success.
Competitive Compensation: $175K-$278K base salary+performance bonus+Equity.
High-Impact Environment Work in a fast-moving, product-driven environment where your ideas directly shape the future of AI productivity.
Cutting-Edge AI Tools for Productivity Access to best-in-class AI tools, including Cursor, GPT models, Gemini, Claude, and other frontier AI systems to maximize engineering and execution efficiency.
Best-in-Class Equipment Choice of top-spec laptops, high-performance workstation setups, and cutting-edge Plaud devices for all new hires.
Team & Culture Annual company offsites, team events, and a culture that values craftsmanship, ownership, and velocity.
Similar jobs
Search more Cybersecurity Engineer jobsBuild AI-powered security automation, secure applications and cloud infrastructure, and lead incident response while partnering with engineering to make security practical and scalable.
Build and operate security capabilities across product and enterprise systems, partnering with engineering and infrastructure teams to strengthen cloud, application, Kubernetes, and AI security while enabling fast, safe delivery.
Senior Security Engineer - Detection & Response
Build and improve detection and response capabilities across cloud and bare-metal infrastructure through threat hunting, automation, incident investigation, and AI-powered security workflows.
Analista de Segurança de Redes
Lidera tecnicamente um turno de operação de segurança de redes, gerenciando mudanças em regras de firewall, troubleshooting e incidentes, além de apoiar analistas e otimizar continuamente a base de regras.
