Founding Security Infrastructure Engineer

Company: Confidential - Series A AI sales-agent company
Location: San Francisco, CA (hybrid, 3-4 days per week in office)
Compensation: $200,000 - $260,000 + competitive equity
Employment Type: Full-time
Visa Sponsorship: Visa transfers (OPT, H-1B transfer)

About the Company

A Series A company building AI phone sales agents for mortgage lenders, which has grown to eight-figure revenue quickly and counts several of the largest independent mortgage banks as customers.

The Role

Our client is hiring its first dedicated security hire (5+ years) to own and build the entire security and privacy program from the ground up across cloud infrastructure, AI systems and enterprise compliance. This is a true 0-to-1 role for someone who has built or matured security at a fast-growing startup and is deeply hands-on: implementing systems and controls, not just writing policy, while keeping a fast team moving.

What You Will Do

• Build and own the security program end to end: cloud infrastructure security, IAM, secrets management, encryption and data isolation across AWS.
• Own SOC 2 Type II compliance, including the observation period, vendors and internal policy adherence.
• Design controls for how internal AI agents access systems, with auditing, protection against unauthorized access and AI use policies.
• Manage permissions and data protection for sensitive customer data (tokenization, anonymization, access) without slowing development.
• Lead customer security reviews, manage third-party penetration testing and evaluate external tools' security posture.

What You Bring

• 5+ years in cloud or infrastructure security engineering, ideally on AWS
• Built or owned cloud/infra security at a fast-growing startup or a company with a high engineering bar
• Cloud security depth: IAM, networking, encryption, secrets management
• Clear, structured articulation of security decisions under technical questioning
• Active use of AI tools in your workflow
• Based in San Francisco and able to work in office at least 3 days a week

Nice to Have

• One of the first security hires at a VC-backed startup
• SOC 2 Type II or similar compliance programs
• Deep application security expertise
• Terraform, Kubernetes or CI/CD security tooling
• Securing AI/LLM applications or agent workflows

Interview Process

Initial screen with a founder (30 min), technical interview (60 min), system design interview (1 hour), onsite.

Tech Stack

AWS, IAM, Terraform, Kubernetes, CI/CD, SOC 2, Python, infrastructure as code