Security Engineer
- Location
- San Francisco
- Workplace
- Hybrid
- Compensation
- $200k – $315k + equity
- Visa
- Visa Sponsorship Available
About this role
What we're looking for:
We need someone with 3+ years of hands-on information security experience who has strong fundamentals in application and/or cloud security (AWS/GCP). You should be comfortable operating with high autonomy in a fast-moving startup environment and have a track record of building and improving security programs from the ground up. Bonus points if you have experience securing AI agents/LLM systems or enterprise compliance experience (SOC 2, ISO 27001).
What you'll do:
Own security reviews and threat modeling for new and existing product surfaces across Nooks' AI-native platform
Build and improve core security processes including secure SDLC, detection & response
Harden cloud and application infrastructure and drive remediation of high-priority risks
Help define how we secure AI agents and govern their use — including guardrails, data exposure, prompt-injection, and abuse risks
Support enterprise customer trust through compliance (SOC 2) and customer-facing security needs
Partner closely with product and infra engineering to embed security into how we ship
What happens next
Skip the application pile. I get you in front of the people who decide.
Confirm the fit
A few questions to make sure this role is the right shape for you. Two minutes.
I pitch you to the company
I write the intro, send it to the founder, and handle the back-and-forth.
A meeting lands on your calendar
When the company wants to meet, I get the call on your calendar. You just show up.
Culture & values
Engineering and product team work in SF office 2-3 times per week
Go-to-market team is distributed across the U.S.
Company emphasizes real-time collaboration
Focus on enabling creative problem-solving and customer interaction over manual tasks
Know someone who'd be great for this?
