Product Security Engineer, Cloud & Infrastructure Austin, TX

Haleos, Inc.; Austin (TX); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Equity

Remote-friendly

Health insurance

401(k)

Job summary

Haleos, Inc. in Austin, TX, is seeking a Product Security Engineer to design and implement security controls across our cloud-native platform. You will architect multi-tenant security, enforce IAM, and lead incident response in collaboration with engineering teams.

The role emphasizes threat modeling, CI/CD security, API security, and compliance with SOC 2 and GDPR, with an opportunity to shape security foundations at an early-stage company.

Qualifications

• 4+ years of experience in cloud, application, or infrastructure security.
• Experience securing multi-tenant SaaS applications with strict data isolation requirements.
• Proficiency with security frameworks (OWASP, NIST, CIS).
• Experience with IAM, OAuth, SAML and authentication systems.
• Knowledge of encryption at rest and in transit; key management best practices.
• Experience with security monitoring and SIEM tools (e.g., Splunk, Datadog).
• Strong API security skills including rate limiting, tokens, threat protection.
• Familiarity with container security (Docker, Kubernetes) and IaC security.
• Experience conducting security reviews, threat modeling, and risk assessments.

Responsibilities

• Design and implement security architecture for multi-tenant SaaS infrastructure.
• Build security controls for AI systems handling business and communications data.
• Architect and maintain security for real-time data sync across third-party integrations.
• Implement threat detection and monitoring systems for security incidents.
• Conduct security assessments and penetration testing of cloud infra and apps.
• Design and enforce security policies for API authentication and rate limiting.
• Build automated security scanning and vulnerability management in CI/CD pipelines.
• Lead SOC 2, GDPR, and other framework compliance efforts.
• Perform threat modeling for new features and architectural changes.
• Develop security monitoring dashboards and incident response playbooks.
• Collaborate with engineering to enforce secure development practices.

Skills

Cloud security

App security

Infra security

IAM/OAuth/SAML

Threat modeling

Security in CI/CD

API security

Encryption at rest/in transit

Security monitoring

Tools

Splunk

Datadog

Docker

Kubernetes

CI/CD tooling

Job description

Product Security Engineer, Cloud & Infrastructure

Austin, TX Hybrid

About Haleos

We're building the operating system for how companies are founded and scaled. Haleos develops JaneOS1 and AtlasOS1 - AI that carries context across the whole journey, not a single chat. We're solving fundamental challenges in the entrepreneurial and organizational stack with production AI systems.

The Role

Architect and implement security controls across our cloud-native platform. Design systems that protect sensitive business data, ensure privacy isolation across user namespaces, and maintain compliance with enterprise security standards.

You Will

• Design and implement security architecture for multi-tenant SaaS infrastructure with strict namespace isolation
• Build security controls for AI systems handling sensitive business, financial, and communications data
• Architect and maintain security for real-time data synchronization across multiple third-party integrations
• Implement threat detection and monitoring systems to identify and respond to security incidents
• Conduct security assessments and penetration testing of cloud infrastructure and applications
• Design and enforce security policies for API authentication, authorization, and rate limiting
• Build automated security scanning and vulnerability management systems within CI/CD pipelines
• Lead security compliance efforts including SOC 2, GDPR, and other relevant frameworks
• Perform threat modeling for new features and architectural changes
• Develop security monitoring dashboards and incident response playbooks
• Collaborate with engineering teams to establish secure development practices and security-by-design principles
• Manage secrets, encryption keys, and access control systems across the platform

Must Have

• 4+ years of experience in cloud security, application security, or infrastructure security
• Strong understanding of cloud security controls in AWS, GCP, or Azure
• Experience securing multi-tenant SaaS applications with strict data isolation requirements
• Proficiency with security tools and frameworks (OWASP, NIST, CIS benchmarks)
• Experience with identity and access management (IAM), OAuth, SAML, and authentication systems
• Knowledge of encryption at rest and in transit, including key management best practices
• Experience with security monitoring and SIEM tools (Splunk, Datadog Security, or similar)
• Strong understanding of API security, including rate limiting, token management, and threat protection
• Familiarity with container security (Docker, Kubernetes) and infrastructure-as-code security
• Experience conducting security reviews, threat modeling, and risk assessments

Nice to Have

• Experience securing AI/ML systems and vector databases
• Background in security for data integration platforms or ETL systems
• Knowledge of webhook security and event-driven architecture security patterns
• Experience with compliance automation and continuous compliance monitoring
• Familiarity with privacy-preserving technologies and data anonymization techniques
• Understanding of financial data security requirements and banking integrations (PCI DSS)
• Experience with bug bounty programs and coordinated vulnerability disclosure
• Knowledge of supply chain security and third-party risk management
• Background in security for real-time communication systems
• Experience with zero-trust security architecture
• Certifications such as CISSP, OSCP, CEH, or cloud security certifications

Benefits & Compensation

• Competitive salary and equity package
• Health, dental, and vision insurance
• 401(k) with company match
• Flexible PTO policy
• Remote-friendly work environment
• Opportunity to establish security foundations at an early-stage company

Due to our current development phase, additional product details will be shared during the interview process.