Security Engineer

About this role

Profound, an AI-powered marketing platform backed by top-tier VCs, is seeking its first dedicated Security Engineer to build and scale security practices across the platform, infrastructure, and corporate environment. You'll own access control, vulnerability management, compliance, and incident response while partnering closely with engineering teams to enable secure, rapid growth.

What you'll do

• Harden AWS environment and drive SOC 2 Type II continuous compliance in the first 90 days
• Implement least-privilege access controls and conduct regular access reviews across environments
• Build and manage a vulnerability management program for infrastructure, applications, and dependencies
• Integrate security scanning into CI/CD pipelines and triage findings from automated tools and assessments
• Implement detection and monitoring capabilities using log aggregation and SIEM tooling
• Lead post-incident reviews and maintain risk assessments to drive prioritization decisions

What they're looking for

• Security engineering (5+ years in SaaS or infrastructure-heavy environments)
• SOC 2 compliance program design and maintenance
• AWS security services (IAM, VPC, CloudTrail, GuardDuty, Security Hub)
• Identity and authentication protocols (OAuth, SAML, OIDC)
• Python or Bash scripting for security automation
• Vulnerability management and security scanning (SAST, DAST, SCA)
• Cloud security architecture and risk assessment
• Incident response and post-incident analysis

Benefits

• Base salary: $200,000–$250,000 (NYC)
• Equity compensation
• Full range of benefits and perks
• Opportunity to shape security posture from the ground up as first dedicated security hire
• Work with a fast-moving team at a $1B AI-focused company
• Global presence across NYC, SF, Buenos Aires, and London