Security Engineer: AI Agent & Cloud Defense

nooks; Seattle (WA); On-site; USD 200,000 - 315,000; Full time

Benefits offered by this job

Equity

Generous benefits

Top-of-market pay

Job summary

Nooks.ai is building the Agent Workspace for Sales, securing an AI-native platform used by 1M+ interactions daily. You’ll shape our security program from the ground up, including how we secure AI agents and govern their use across surfaces.

As our second security engineer, you’ll drive secure SDLC, threat modeling, and risk remediation while partnering with product and infra teams to embed security into every release. This is a high-ownership, foundational role on a fast-growing team.

Qualifications

• 3+ years of hands-on information security experience.
• Experience at a startup or early-stage company; comfort with ambiguity, autonomy, and high ownership.
• Strong fundamentals in application and/or cloud security (AWS/GCP).
• Pragmatic judgment - able to prioritize risk and do more with less.
• Clear communication and a collaborative, low-ego style.

Responsibilities

• Own security reviews and threat modeling for new and existing product surfaces.
• Build and improve core security processes (secure SDLC, detection & response).
• Harden our cloud and application infrastructure and drive remediation of high-priority risks.
• Help define how we secure AI agents and govern their use - guardrails, data exposure, prompt-injection and abuse risks.
• Support enterprise customer trust: compliance (SOC 2), and customer-facing security needs.
• Partner closely with product and infra engineering to embed security into how we ship.

Skills

Security reviews

Threat modeling

Cloud security

AWS

GCP

Communication

Tools

AWS

GCP

Job description

Nooks.ai is building the Agent Workspace for Sales, securing an AI-native platform used by 1M+ interactions daily. You’ll shape our security program from the ground up, including how we secure AI agents and govern their use across surfaces.

As our second security engineer, you’ll drive secure SDLC, threat modeling, and risk remediation while partnering with product and infra teams to embed security into every release. This is a high-ownership, foundational role on a fast-growing team.