Security Engineer

Nous Research; United States; À distance; USD 120 000 - 180 000; Plein temps

Résumé du poste

Nous Research is seeking a Security Engineer to own security end-to-end across our infrastructure, products, and enterprise deployments. This hands-on role focuses on hardening multi-cloud infrastructure and building the security foundation demanded by regulated enterprise customers.

You will own production security across a multi-cloud footprint, secure multi-tenant SaaS and on-prem deployments, and lead vulnerability management, incident response, and SOC 2 readiness.

Responsabilités

• Own production security across a multi-cloud footprint spanning AWS, GCP, Azure, and Vercel.
• Secure multi-tenant SaaS, dedicated VPC, self-hosted Kubernetes, and air-gapped deployments.
• Secure the Hermes Agent platform across sandboxing, kernel-level file system and network isolation, agent identity, credential controls, egress controls, and trace integrity.
• Own SOC 2 technical controls, evidence collection, remediation, and ongoing readiness.
• Harden identity and access management, including SSO and SAML consolidation, least-privilege access reviews, 2FA, and BYOD policies.
• Lead vulnerability management, penetration testing, incident response, and cloud-native security monitoring.
• Strengthen the secure software development lifecycle through practical controls, including peer-review requirements, while maintaining high development velocity.
• Support enterprise deals by completing security questionnaires, leading architecture reviews, and addressing penetration-testing requirements.

Description du poste

As a Security Engineer at Nous Research, you'll own security end-to-end across our infrastructure, products, and enterprise deployments. Nous builds open-source AI language models and agents, including Hermes Agent, which is used by consumers and Fortune 500 enterprises across multi-tenant SaaS, dedicated VPC, self-hosted, and air-gapped environments.

This is a hands-on-keyboard role for someone who wants to harden multi-cloud infrastructure, secure a novel agentic AI platform, and build the security foundation regulated enterprise customers demand. You'll be the person focused full-time on protecting the company while helping the rest of the team continue shipping quickly.

Own production security across a multi-cloud footprint spanning AWS, GCP, Azure, and Vercel.

Secure multi-tenant SaaS, dedicated VPC, self-hosted Kubernetes, and air-gapped deployments.

Secure the Hermes Agent platform across sandboxing, kernel-level file system and network isolation, agent identity, credential controls, egress controls, and trace integrity.

Own SOC 2 technical controls, evidence collection, remediation, and ongoing readiness.

Harden identity and access management, including SSO and SAML consolidation, least-privilege access reviews, 2FA, and BYOD policies.

Lead vulnerability management, penetration testing, incident response, and cloud-native security monitoring.

Strengthen the secure software development lifecycle through practical controls, including peer-review requirements, while maintaining high development velocity.

Support enterprise deals by completing security questionnaires, leading architecture reviews, and addressing penetration-testing requirements.

Partner across engineering, infrastructure, product, FDE, and operations to identify and address security risks.