Security Engineer — AI-First Platform, Own Cloud & App Security

Digital Waffle; San Francisco (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Digital Waffle in San Francisco is seeking a hands-on Security Engineer to own security across cloud infrastructure, application surfaces, and the AI agent stack. This is the second security hire in a high-growth AI-native platform.

You'll build the security program from the ground up, partner closely with product and infrastructure engineers, and drive secure SDLC, threat modelling, and compliance efforts (SOC 2) to earn customer trust.

Qualifications

• 3 to 8 years hands-on information security experience, focused on security engineering.
• Experience in infrastructure and cloud security (GCP preferred).
• Proven track record building security systems end to end: detection/response, secure SDLC and hardening.
• Experience at early-stage or high-growth startups building security infrastructure from scratch.
• Ambitious hands-on builder excited to own entire security domains as second hire.
• Strategic communicator able to discuss problems and approach at an executive level.

Responsibilities

• Own security reviews and threat modelling for new and existing product surfaces across the AI-native platform.
• Build and improve core security processes including secure SDLC and detection and response.
• Harden cloud and application infrastructure and drive remediation of high-priority risks.
• Help define how the business secures AI agents and governs their use, including guardrails, data exposure, prompt-injection and abuse risks.
• Support enterprise customer trust through compliance (SOC 2) and customer-facing security needs.
• Partner closely with product and infrastructure engineering to embed security into shipping cycles.

Skills

Threat modelling

Security reviews

Secure SDLC

Cloud security

Infrastructure hardening

Executive communication

Startup experience

Tools

GCP

AWS

Azure

SOC 2 tooling

Job description

Digital Waffle in San Francisco is seeking a hands-on Security Engineer to own security across cloud infrastructure, application surfaces, and the AI agent stack. This is the second security hire in a high-growth AI-native platform.

You'll build the security program from the ground up, partner closely with product and infrastructure engineers, and drive secure SDLC, threat modelling, and compliance efforts (SOC 2) to earn customer trust.