Security Engineer — API & Infrastructure Security
Department
Engineering
Location / Working mode
San Francisco Office
Role Description
You'll own security across the Aurus platform — from gateway-level threat detection to SOC II compliance operations.
What you will do:
Own security across the platform, from gateway-level threat detection to the controls behind our compliance posture.
Design authentication, authorization, and secret-management systems that thousands of teams rely on.
Run our SOC 2, ISO 27001, and related compliance operations and evidence collection.
Partner with engineering to make secure the default, not an afterthought.
Who you are:
You've owned security for a platform handling sensitive data at scale.
You're deep on API security — auth, encryption, access control, threat modeling.
You've been through SOC 2 / ISO 27001 audits and know how to make compliance real, not theater.
You think like an attacker and build like an engineer.
What we offer:
Competitive salary and meaningful early-stage equity.
Remote-friendly work with flexible hours and a home-office and hardware budget.
Top-tier health, dental, and vision coverage.
Generous PTO and a genuine expectation that you take it.
A small, senior team where your work ships to thousands of engineering teams and you see the impact directly.