Lead Security Engineer — AI Platform & Cloud Security

HUD; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical & dental

Office meals

Holiday break

Equinox membership

401k

Commuter benefits

Unlimited token access

Job summary

HUD is seeking a Security Engineer to own and build our security program as the first full-time hire. You will protect our product, cloud infrastructure, data workflows, and internal systems while leading incident response, SOC 2, and customer trust.

You will collaborate with engineering, legal, and operations to translate data-license requirements into enforceable controls, securing APIs and platforms as our data assets grow. Remote-friendly startup pace.

Qualifications

• Strong security engineering fundamentals across infrastructure, detection and response.
• Experience leading security incidents end-to-end, including root-cause analysis.
• Experience implementing or operating SOC 2 or a similar security framework.
• Ambition and judgment to prioritize risks and drive implementation.
• Excellent communication with founders, engineers, operations, legal, auditors, customers.

Responsibilities

• Lead detection and incident response from signal to postmortem.
• Own security roadmap across product, cloud and infrastructure.
• Secure APIs, platform, and data systems through threat modeling and reviews.
• Build monitoring, detection, and incident-response capabilities; lead investigations.
• Own SOC 2 and customer trust including audits and vendor reviews.
• Translate data-license requirements into enforceable controls for data access, provenance, retention, and deletion.

Skills

Security fundamentals

Incident response

SOC 2

Communication

Security certs

Job description

HUD is seeking a Security Engineer to own and build our security program as the first full-time hire. You will protect our product, cloud infrastructure, data workflows, and internal systems while leading incident response, SOC 2, and customer trust.

You will collaborate with engineering, legal, and operations to translate data-license requirements into enforceable controls, securing APIs and platforms as our data assets grow. Remote-friendly startup pace.