Security Engineer

hud; San Francisco (CA); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Competitive compensation

Top-tier health insurance

Lunch and dinner in office

Holiday break + PTO

Equinox membership

401k

Commuter benefits

Unlimited AI tokens

Job summary

HUD is seeking a Security Engineer to own and build our security program as the first full-time security hire. You will work closely with the rest of the engineering team to secure our product, cloud infrastructure, data workflows, and internal systems.

You will also lead incident response, SOC 2, and customer trust, ensuring our infrastructure remains secure as we scale. This role focuses on protecting billions in data assets and delivering durable security improvements.

Qualifications

• Strong security engineering fundamentals across infrastructure, detection, identity.
• Experience leading security incidents end-to-end.
• Experience with SOC 2 or a comparable security framework.
• Strong judgment and risk prioritization under uncertainty.
• Excellent communication with founders, engineers, operations, and auditors.

Responsibilities

• Lead detection and incident response from signal to alert to postmortem.
• Own HUD's security roadmap across product, cloud, and infrastructure security, compliance.
• Secure HUD's APIs, platform, and data systems through threat modeling and access controls.
• Build monitoring and incident-response capabilities; lead investigations and postmortems.
• Own SOC 2 and customer trust, including policy management and audits.
• Partner with legal, engineering, and operations to translate data requirements into controls.

Skills

Security engineering

Incident response

SOC 2

Threat modeling

Access control

Secrets management

Cloud security

Communication

Audit & compliance

Job description

About HUD

HUD is building infrastructure to create RL training data and evals for frontier AI agents, as well as a marketplace to sell these to frontier labs through the HUD marketplace. Our platform is used by frontier labs, Fortune 500 companies, and startups. We've raised $16M from top VCs and were YC W25.

About the role

We're looking for a Security Engineer to own and build HUD's security program as our first full-time security hire. You will work closely with the rest engineering to secure our product, cloud infrastructure, data workflows, and internal systems. You'll also lead incident response, SOC 2, and customer trust.

We are securing up to billions in data assets and are looking for someone who can lead security such that our infrastructure is never compromised.

Responsibilities

• Lead detection and incident response from signal to alert to postmortem
• Own HUD's security roadmap across product security, cloud and infrastructure security, corporate security, incident response, and compliance
• Secure HUD's APIs, platform, and data systems through threat modeling, design and code reviews, authentication and authorization controls, secrets management, etc.
• Build monitoring, detection, and incident-response capabilities; lead investigations and postmortems; and turn incidents and emerging threats into durable improvements
• Own SOC 2 and customer trust, including control design, security questionnaires, policy management, vendor reviews, and audits
• Partner with legal, commercial, engineering, and operations to translate customer contracts and data-license requirements into enforceable controls for data access, provenance, permitted use, retention, deletion, isolation, and auditability

Experience

You may be a good fit if you have:

• Strong security engineering fundamentals and hands-on experience across multiple areas such as infrastructure security, detection and response, identity, etc.
• Experience leading security incidents end-to-end, from detection and containment through root-cause analysis and follow-up engineering work
• Experience implementing or operating SOC 2 or a comparable security framework, including translating requirements into real technical and operational controls
• High agency and sound judgment-you can identify and prioritize the risks that matter, make pragmatic decisions under uncertainty, and personally drive implementation
• Strong communication skills for working with founders, engineers, operations, legal, auditors, customers, and external partners

Strong candidates may also:

• Experience as an early security hire or building a security program from scratch at a fast-growing startup
• Experience securing AI/ML infrastructure, agent execution environments, data platforms, developer tools, or other systems that run untrusted code or process sensitive data
• Experience protecting licensed, proprietary, or customer-provided data and operationalizing contractual requirements around access, use, retention, and deletion
• Experience finding CVEs, creating security tooling on GitHub, or with bug bounty programs
• CVEs, or have created security tooling on GitHub, have conference talks, bug bounty history, or blog posts about incidents/something security related they've done that would also be good
• OSCP, AWS Security Specialist, OSWE, CKS, or GIAC hands on certifications

We prioritize technical aptitude and learning potential over years of experience. Motivated candidates are encouraged to apply even if they don't meet all criteria.

Team & company details

• Team Size : ~25 people currently, mostly full-time in-person

Our team: Our team includes 4 International Olympiad medalists (IOI, ILO, IPhO), serial AI startup founders, and researchers with publications at ICLR, NeurIPS, etc.

Company stage: We have 8 figures in funding and high revenue growth. We're scaling profitably and quickly to meet very strong demand.

Logistics

• Employment : Full-time.
• Location : On-site only, for now. You can join the team in the San Francisco Bay Area or Singapore offices.
• Visa Sponsorship : We provide support for relocation and visas for strong full-time candidates to the US or Singapore.
• Timeline : Applications are rolling. The process is 2 technical interviews and a 2-3 day work trial.

What we offer

• Very competitive compensation
• 100% covered top-of-the-line medical, dental, and vision from Blue Shield of CA (US employees)
• Lunch and dinner when you're in the office
• Company-wide holiday break (Christmas Eve to New Year's Day) on top of PTO and paid holidays
• Other perks including an Equinox membership, 401k, and commuter benefits (US employees)
• Unlimited* access to tokens for ChatGPT, Claude Code, Cursor, etc. * By unlimited, we mean no one on our token usage leaderboard has ever hit a limit. So we have no idea what the limit is.