Security Engineer

Skills

About the Role

You will secure the ML lifecycle, proprietary model weights, research data, LLM interfaces, and cloud infrastructure. You will embed security controls in CI/CD and infrastructure workflows, manage secrets and vulnerabilities, implement IAM controls, lead incident response, and enable secure engineering practices.

Requirements

• 3+ years of DevSecOps, cloud security, or site reliability engineering experience
• Experience building and securing CI/CD pipelines with GitHub Actions, GitLab CI, or Jenkins
• Infrastructure as Code proficiency with Terraform or Pulumi
• Experience securing AWS, GCP, or Azure environments
• Knowledge of Docker and Kubernetes security
• Knowledge of security frameworks and practical implementation

Responsibilities

• Secure the ML lifecycle against data poisoning and model-weight theft
• Deploy prompt-injection defenses and runtime firewalls
• Implement AI Security Posture Management for models, datasets, and endpoints
• Embed secret scanning, API exposure checks, and software composition analysis in CI/CD
• Codify cloud security policies with Infrastructure as Code
• Manage secrets and vulnerability patching for containerized environments
• Design least-privilege IAM controls
• Lead incident response and monitor production logs
• Provide IDE scanning tools and pre-commit hooks
• Educate engineers on security practices

Benefits

• Equity
• 28 days holiday in DE, NL, and UK or 21 days holiday in JP, SG, and US, plus local public holidays
• 26 weeks paid parental leave for primary caregivers and 12 weeks for secondary caregivers
• Professional development budget