Platform Security Engineer — AI/LLM & Cloud Defense

Credit Sesame, Inc.; Sacramento (CA); On-site; USD 170,000 - 215,000; Full time

Benefits offered by this job

Equity in pre-IPO company

Medical, dental, vision insurance

Home office stipend

Professional development program

Flexible paid time off

10 paid holidays

Sesame Wellness days

Job summary

Credit Sesame, Inc. is seeking an experienced security engineer to own security end-to-end for our platform, standing up open‑source tooling, writing automation, and running assessments.

You will lead security reviews, manage access controls, vulnerability management, and incident response while supporting PCI DSS, SOC 2, and ISO 27001 compliance initiatives. Equity and growth opportunities accompany a strong compensation package.

Qualifications

• 7+ years of hands-on security engineering experience across applications, cloud, and networks.
• Experience evaluating tools and making architecture decisions with leadership buy-in.
• Proficient in building production automation and integrations.
• Hands-on experience deploying OSS security tools and ensuring secure configurations.

Responsibilities

• Run end-to-end security for the platform, including tooling, automation, and assessments.
• Lead reviews for tools, vendors, projects with data handling, DPAs, and third‑party security reports (SOC 2, PCI, ISO).
• Own access and infrastructure security, IAM least-privilege, and network configuration audits.
• Manage vulnerability programs across cloud and endpoints and EDR/MDR tooling.
• Lead incident response from triage to remediation and build runbooks.
• Develop and maintain PCI DSS, SOC 2, ISO 27001 controls and audits; support DR planning.
• Collaborate with DevOps on patching and secure defaults; report risk to engineering leadership.
• Build in-house AppSec scanning (SAST/SCA/IaC), integrate with CI (GitLab/Jenkins).
• Create security tooling and automation; dashboards and data pulls from various sources.
• Threat-model AI/LLM systems; coordinate external pentests as needed; drive remediation.

Skills

Security engineering

App security

Cloud security

Network pentesting

Automation

OSS security tools

AWS security

Threat modeling

Communication

Compliance knowledge

Education

BS in Computer Science or related field

Tools

Burp Suite Community

OWASP ZAP

Nmap

Nuclei

Metasploit

Semgrep

Trivy

Wazuh/OSSEC

ELK/Kibana

Prowler/ScoutSuite

HashiCorp Vault

Job description

Credit Sesame, Inc. is seeking an experienced security engineer to own security end-to-end for our platform, standing up open‑source tooling, writing automation, and running assessments.

You will lead security reviews, manage access controls, vulnerability management, and incident response while supporting PCI DSS, SOC 2, and ISO 27001 compliance initiatives. Equity and growth opportunities accompany a strong compensation package.