Security Engineer

About the Company

Profound is the marketing platform for the AI era. Backed by Lightspeed, Sequoia, Kleiner Perkins, and Khosla Ventures at a $1B valuation, we are a lean, fast-moving team defining a new category in AI-driven marketing intelligence.

Responsibilities

• Harden AWS environments and drive SOC 2 Type II continuous compliance
• Integrate security scanning into CI/CD pipelines
• Enforce least-privilege access controls and conduct regular access reviews
• Build and run a vulnerability management program across infrastructure and applications
• Triage and respond to security findings from automated tooling and bug bounty programs
• Partner with Infrastructure to implement detection and monitoring using SIEM tooling
• Conduct risk assessments and maintain a risk register
• Build security policies and lead post-incident reviews

Requirements

• 5+ years in security engineering within high-growth SaaS or infrastructure-heavy environments
• Hands-on experience building or maintaining a SOC 2 compliance program
• Strong knowledge of AWS security services (IAM, VPC, CloudTrail, GuardDuty, Security Hub)
• Deep understanding of identity and authentication protocols (OAuth, SAML, OIDC)
• Practical scripting skills in Python or Bash

Preferred Qualifications

• Experience integrating SAST, DAST, SCA, or container scanning into CI/CD
• Familiarity with network security fundamentals and infrastructure-as-code (Terraform, CloudFormation)
• Background in penetration testing or application security assessments
• Familiarity with data infrastructure security (ClickHouse, PostgreSQL)
• Relevant certifications such as CISSP, CCSP, or AWS Security Specialty