Security Engineer: AI/3D Platform, Cloud & Compliance

Schemata; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Equity

Top-tier benefits

In-person SF culture

Flexible work arrangement

Job summary

Schemata is building a security-first platform for cutting-edge AI-enabled virtual training. You will own security architecture, drive red-teaming of AI systems, and lead monitoring and incident response in a fast-growing startup.

The role emphasizes implementing controls across IAM, network, data, and code, while evidencing compliance with NIST 800-53, SOC 2, and related standards. Join a high-ownership team in San Francisco with equity and comprehensive benefits.

Qualifications

• Security engineering or cloud security with hands-on implementation ownership.
• Deep AWS security expertise: IAM, VPC, KMS, GuardDuty, least-privilege.
• Application security: authN/authZ design, secure code review, threat modeling.
• Ability to write real code (Python) to automate controls and tooling.
• Experience with at least one compliance framework (NIST 800-53, FedRAMP, SOC 2, ISO 27001).
• Container and Kubernetes security: image hardening, runtime policy, supply chain integrity.
• Backend or infrastructure skills to ship a service and fix CI pipelines.
• Clear communication with non-security engineers and customer security teams alike.

Responsibilities

• Own the security architecture across the platform and review designs.
• Red team AI systems and assess prompt injection, jailbreaks, and data poisoning.
• Implement continuous security monitoring and vulnerability management.
• Run detection and response, triage incidents, and improve runbooks.
• Ensure compliance with NIST SP 800-53 and SOC 2 controls, FedRAMP/ATO efforts.

Skills

Security engineering

AWS security

App security

Python automation

Compliance frameworks

Kubernetes security

Infrastructure as code

Communication

Tools

Terraform

Job description

Schemata is building a security-first platform for cutting-edge AI-enabled virtual training. You will own security architecture, drive red-teaming of AI systems, and lead monitoring and incident response in a fast-growing startup.

The role emphasizes implementing controls across IAM, network, data, and code, while evidencing compliance with NIST 800-53, SOC 2, and related standards. Join a high-ownership team in San Francisco with equity and comprehensive benefits.