Cloud Security Engineer

Julius; San Francisco (CA); On-site; USD 150,000 - 180,000; Full time

Job summary

Join a dynamic early-stage AI lab as a Security & Compliance Engineer, where you'll shape the security posture of innovative coding agents. This role involves defining security strategies, conducting threat assessments, and leading compliance efforts across a rapidly expanding platform. Collaborate with a talented team to secure cutting-edge applications that empower users to become software creators. If you have a passion for cloud security and a drive to foster a security-first culture, this is the perfect opportunity to make a significant impact in a fast-paced startup environment.

Qualifications

• 3+ years of experience in cloud security engineering.
• Strong knowledge of compliance frameworks like SOC 2 and ISO 27001.

Responsibilities

• Define and implement security strategy tailored to cloud infrastructure.
• Conduct threat modeling and develop incident response plans.

Skills

Cloud Security Engineering

Container Security (Kubernetes)

Compliance Frameworks (SOC 2, ISO 27001, GDPR)

Security Tooling (SIEM, IDS/IPS)

Threat Modeling

Penetration Testing

Infrastructure as Code (Terraform)

Tools

Prometheus

Grafana

ELK Stack

Job description

Overview

We are an early-stage applied AI lab building coding agents. We're on a mission to enable one billion humans to become software creators, and we're starting with a focus on data science and analysis use cases. Our product, Julius, has served over 1 million users and generated over 3 million data visualizations. Under the hood, this system continuously executes vast amounts of user-generated code on remote containers that we manage.

We're a close-knit, 10-person startup with team members from Uber, Microsoft, and Facebook. We're making revenue, growing rapidly, and backed by top-tier investors including AI Grant and founders of Vercel, Notion, Perplexity, Palantir, Replit, Zapier, Intercom, and Dropbox, as well as researchers from OpenAI and Google DeepMind.

As our Security & Compliance Engineer, you will be responsible for the security posture of everything we build: from the code execution infrastructure and LLM-driven applications to corporate IT and compliance initiatives. You will join us on-site in San Francisco, owning our security roadmap end-to-end and helping shape the foundation of our rapidly expanding platform.

What You'll Do

Define & Implement Security Strategy

Own and evolve our security strategy. Establish policies, standards, and best practices tailored to our cloud infrastructure and containerized environment.

Threat Modeling & Incident Response

Conduct threat modeling, security assessments, and penetration testing to identify risks. Develop and maintain incident response plans, ensure rapid and effective responses to incidents.

Compliance Management

Lead compliance efforts (SOC 2, ISO 27001, GDPR, or relevant frameworks). Work cross-functionally to document policies, implement controls, and manage audits.

Security Tooling & Automation

Evaluate, deploy, and maintain security tooling (SIEM, IDS/IPS, vulnerability scanners). Build automation around threat detection, vulnerability management, and patching pipelines.

Cloud & Container Security

Oversee the security of container orchestration environments (Kubernetes) and cloud services (AWS, GCP, or Azure). Champion best practices around container lifecycle management, network segmentation, and secure CI/CD workflows.

User & Data Protection

Implement strong data protection controls, including encryption, key management, and access policies. Ensure secure handling of sensitive user data throughout our systems.

Security Awareness & Culture

Train and mentor engineers on secure coding, threat modeling, and incident response. Foster a security-first mindset across the organization.

What we're looking for:

• 3+ years of cloud security engineering experience

• Experience with GCP and container security (Kubernetes)

• Strong knowledge of compliance frameworks (SOC 2, ISO 27001, GDPR)

• Proficiency in security tooling (SIEM, IDS/IPS), vulnerability scanners, logging, and monitoring platforms (Prometheus, Grafana, ELK Stack)

• Expertise in threat modeling and penetration testing

• Familiarity with Infrastructure as Code (Terraform) is a plus

Bonus: You've built or experimented with AI/LLM-driven projects and understand the unique security considerations of AI-based applications.

Compensation:
$150k - $180k + meaningful equity