Founding Security Engineer – Spatial AI Platform (Hybrid)

Schemata; San Francisco, Northern (CA, KY); Hybrid; USD 180,000 - 270,000; Full time

Benefits offered by this job

Competitive salary

Meaningful equity stake

Comprehensive health coverage

401(k) plan

Paid parental leave

High visibility and real impact

Job summary

Schemata is hiring a Founding Security Engineer to build and secure our spatial intelligence platform. You will define security architecture across identity, authorization, tenancy, encryption, and auditing, while leading red team testing of AI systems and overseeing detection and response operations.

You will implement coverage for SAST/DAST, container security, and IaC policies, and drive evidence for NIST SP 800-53, SOC 2, FedRAMP and related compliance efforts.

Qualifications

• Strong experience in security engineering with hands-on ownership across platforms.
• Deep AWS security expertise focusing on IAM, VPC, KMS and threat detection.
• Experience writing Python to automate controls and tooling.

Responsibilities

• Own the security architecture across the platform, including identity, authorization, tenancy isolation, encryption, and audit logging.
• Red team AI systems to test prompts, jailbreaks, data poisoning, model extraction, and grounding model failures in 3D scenes.
• Implement continuous security monitoring: SAST/DAST, dependency and container scanning, secrets detection, IaC checks.
• Run detection and response: triage, investigation, containment, incident review, and drive durable improvements.
• Ensure compliance with NIST SP 800-53, SOC 2, FedRAMP, and POA&M tracking and remediation.

Skills

Security engineering

AWS security

Application security

Python automation

Container security

Kubernetes security

Threat modeling

Tools

Terraform

CI pipelines

SAST/DAST

Job description

Schemata is hiring a Founding Security Engineer to build and secure our spatial intelligence platform. You will define security architecture across identity, authorization, tenancy, encryption, and auditing, while leading red team testing of AI systems and overseeing detection and response operations.

You will implement coverage for SAST/DAST, container security, and IaC policies, and drive evidence for NIST SP 800-53, SOC 2, FedRAMP and related compliance efforts.