Security & Compliance Engineer

Varick Agents LTD.; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Meaningful equity

Real ownership

Flexible PTO

Free lunch and dinner in the office

Uber home when staying late

Job summary

Varick is seeking a security/compliance engineer to own SOC 2 programs for regulated enterprises. You will harden the platform with access controls, secrets management, encryption, and security reviews across deployments.

You will serve as the technical point person for client security reviews and vendor questionnaires while setting security standards for engineering. We value hands-on implementation with SOC 2 and related standards, cloud security expertise across AWS/GCP/Azure, and a bias for

Qualifications

• 3+ years in security/compliance engineering with ownership of a program.
• Hands-on with SOC 2 and other standards, with technical evidence behind it.
• Strong cloud security knowledge (AWS, GCP, Azure) and IAM.
• Experience communicating with enterprise security teams.
• A builder's instinct: you automate compliance instead of running it on spreadsheets.

Responsibilities

• Own and run SOC 2 program from evidence collection through audit.
• Harden the platform: access controls, secrets management, encryption, and the security review of how agents touch client systems.
• Build the security tooling and monitoring that catches problems early across our deployments.
• Be the technical point person on client security reviews and vendor questionnaires, translating what we do into what their security team needs to hear.
• Set the security standards the engineering team builds against, and make the secure path the easy path.

Skills

Security engineering

Compliance engineering

Cloud security

Security liaison

Automation

Tools

SOC 2 tooling

Job description

About Varick. Varick builds AI agents that take over real operational workflows inside the world's largest enterprises. Our forward-deployed engineers and strategists embed with client teams, map how work actually runs, then our engineers build the agents into production. We're venture-backed, revenue-generating from day one, and already in production inside several of these companies. You'll join an elite team from Meta, AWS Bedrock, Citadel Securities, McKinsey, BCG, Stanford, and more.

The Role. We run AI agents inside regulated enterprises that hold real money and sensitive data, so security and compliance are what make the deals possible in the first place. You own our security posture and the compliance work (SOC 2 and beyond) that lets a bank or a Fortune 500 trust us inside their environment.

What You'll Do.

• Own and run our SOC 2 program, and the frameworks clients ask for next, from evidence collection through audit
• Harden the platform: access controls, secrets management, encryption, and the security review of how agents touch client systems
• Build the security tooling and monitoring that catches problems early across our deployments
• Be the technical point person on client security reviews and vendor questionnaires, translating what we do into what their security team needs to hear
• Set the security standards the engineering team builds against, and make the secure path the easy path

What We're Looking For.

• 3+ years in security engineering, compliance engineering, or a blend, with real ownership of a program
• Hands-on with SOC 2 (and ideally more: ISO 27001, HIPAA, FedRAMP, or similar), not just policy but the technical evidence behind it
• Solid grasp of cloud security (AWS, GCP, Azure), IAM, secrets, and encryption
• Comfort talking to enterprise security teams and holding your own in a review
• A builder's instinct: you automate compliance instead of running it on spreadsheets

Nice to Have.

• Experience securing multi-tenant SaaS or single-tenant enterprise deployments
• Familiarity with LLM and agent-specific security concerns (prompt injection, data exfiltration, tool-use guardrails)
• Enterprise environments with strict reliability and audit requirements

What We Offer.

• Meaningful equity
• real ownership
• direct access to how the world's largest enterprises actually run
• flexible PTO
• free lunch and dinner in the office
• Ubers home if you're staying late
• monthly team dinners

Logistics. On-site in our San Francisco Financial District office, 5-6 days a week. Comfortable with startup hours, for startup upside.

Equal opportunity employer. Employment is subject to a standard confidentiality and non-disclosure agreement.