Member of Technical Staff, Security Engineering
Inception · San Mateo, USA ·
This posting has been closed.
- Category
- Software engineering
- Experience
- 6+ years
aiapiapi-securityautomationawsazurechatgptci-cdcloudcloud-securitycppdevopsdockergdprinfrastructure-as-codeiso-27001kubernetesmachine-learningobservabilitypythonrustsdlcsoc-2vpc
The Role
We are hiring across seniority levels for a Founding Security Engineer to build the security foundation for a frontier AI platform serving enterprise customers — owning product/API security, enterprise security architecture, compliance readiness, and incident response as the company scales.
For a senior/staff-level role, we are looking for someone with 6+ years of experience who has operated as a TL/TLM or staff+ engineer, remains deeply hands-on, and can provide the leadership presence to make delegation and prioritization decisions as Inception grows. You'll be the first/early security leader at a company where security directly affects customer trust, revenue, and product velocity.
You'll own and drive the systems, processes, and infrastructure that make Inception secure by default: cloud security, network isolation, access controls, incident response, compliance readiness, secure engineering workflows, and customer-facing security requirements. This role is ideal for someone who lives and breathes security, but is still a builder at heart — someone who can design secure systems, write production code, automate workflows, and partner deeply with engineering teams.
This is not a narrow GRC, IT, AI safety, or policy-only role, and it is not AI-specific security research. We're looking for traditional enterprise/product security execution from an "inverted T" engineer: broad software engineering ability with a deep spike in security. You'll be the internal expert who helps us navigate enterprise security, privacy, compliance, and infrastructure risk as we scale — a technical leader, not a friction point for the engineering team.
What You'll Own
- Software engineering fundamentals: This is a software engineering role with a security specialization. Expect to spend 70%+ of your time writing code, building security tools, and automating security best practices. You'll need strong command of CS fundamentals, to design, build, and maintain secure software systems.
- Enterprise security architecture & threat modeling. Design secure systems and guide backend, product, and platform engineers on security architecture and threat modeling for Inception's customer-facing API and enterprise deployments.
- API / product security. Lead proactive threat protection for a public API product handling enterprise usage, analogous to companies exposing API surfaces like ChatGPT or Claude.
- Compliance, certifications, and enterprise readiness. Lead or materially drive security compliance and certifications, including SOC 2 (including ongoing Type 2 readiness) and ISO 27001, plus data privacy and security best practices.
- VPC, GDPR, incident response, and 24/7 security coverage. Operate as a staff-level "all-in-one specialist" across VPC design, network isolation, GDPR, incident response, security monitoring, and operational visibility for production systems.
- Secure infrastructure and tooling. Build and maintain secure infrastructure, automation, and internal tools across Inception's product, platform, and enterprise systems — improving developer velocity while raising the security baseline.
- Engineering practices. Establish and promote secure development, code review, release management, vulnerability management, and incident response practices.
- Pragmatic partnership. Review systems and architectures for security risks and help engineers make pragmatic tradeoffs. Contribute beyond a narrow security lane when needed, especially across backend, infrastructure, platform, and developer tooling.
You Might Be a Fit If
- You have 6+ years of security engineering experience or equivalent staff-level depth, and have operated as a TL/TLM or staff+ engineer who still ships.
- You've built security for enterprise-facing products, APIs, infrastructure, or compliance-heavy environments, and have worked with customers who have procurement, compliance, or customer-trust requirements.
- You have hands-on experience with product/API security for customer-facing APIs.
- You have driven or owned SOC 2, ISO 27001, GDPR, or comparable compliance and certification programs.
- You've built or owned internal security systems, privacy infrastructure, identity and access management, encryption, cloud security controls, mTLS, policy systems, or security services exposed via APIs.
- You're proficient in Python; comfort with at least one systems language such as Go, Rust, or C++ is a plus.
- You're fluent with modern software development, CI/CD, deployment automation, Kubernetes/Docker, infrastructure as code, and cloud platforms such as AWS or Azure.
- You can operate independently in a fast-moving startup without a large security organization around you, and bring startup pace rather than big-tech-only conservatism.
- You partner with fast-moving engineering teams as an enabler, not a blocker, with strong empathy for customer experience and developer velocity.
- BS/MS/PhD in Computer Science or a related field, or equivalent experience.
Nice to Have
- Experience as an early or founding security engineer at a startup or fast-growing engineering organization, helping scale towards 100+ org size.
- Experience preparing companies for enterprise customers, security reviews, SOC 2 Type 2, ISO 27001, GDPR, or similar programs.
- Background in backend engineering, platform engineering, infrastructure, or DevOps before specializing in security.
- Experience building security tooling, developer platforms, or automation that engineers actually use.
- Familiarity with monitoring, observability, vulnerability management, and incident response tooling.
- Experience securing AI/ML infrastructure, GPU-intensive workloads, inference pipelines, serving APIs, or large-scale cloud environments. (Direct AI-specific security experience is not required.)
- Experience with application security, threat modeling, secure SDLC, privacy engineering, or customer-facing security reviews.