Security Engineer
Core
Lead detection, incident response, and security roadmap ownership across product, cloud, and infrastructure security while securing APIs, platforms, and data systems.
Role type
Senior Security Engineer (Program Owner)
Builds
Monitoring, detection, and incident-response capabilities; durable security improvements; SOC 2 compliance controls.
Domain
Cybersecurity, Cloud Security, Infrastructure Security, Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security engineering fundamentals, infrastructure security, detection and response, identity management, incident leadership, SOC 2 framework implementation, risk prioritization, technical decision-making under uncertainty
Preferred skills
Early security hire experience, building security programs from scratch, securing AI/ML infrastructure, protecting licensed/customer data, CVE identification, security tooling development, bug bounty participation, conference speaking, security incident writing
Technologies
GitHub, ChatGPT, Claude Code, Cursor
Responsibilities
Lead detection and incident response from initial signal through alerting, containment, investigation, postmortem, and follow-up engineering work; Own the security roadmap across product security, cloud and infrastructure security, corporate security, incident response, and compliance; Secure HUD's APIs, platform, and data systems through threat modeling, design and code reviews, authentication and authorization controls, and secrets management; Build monitoring, detection, and incident-response capabilities and convert incidents and emerging threats into durable security improvements; Own SOC 2 and customer trust, including control design, security questionnaires, policy management, vendor reviews, and audits; Partner with legal, commercial, engineering, and operations to enforce requirements for data access, provenance, permitted use, retention, deletion, isolation, and auditability
Seniority
Senior, hands-on IC with program ownership
