Security Engineer: Cloud, Compliance & Encryption (Equity)

Guava; Los Angeles (CA); On-site; USD 120,000 - 165,000; Full time

Job summary

Guava is the voice platform for regulated industries and is hiring a Security Engineer to own security across infrastructure, product, and internal systems. You will reduce risk in our cloud environment and voice pipeline, support SOC 2, HITRUST, HIPAA, and PCI-adjacent compliance, and partner with engineering to bake security into the product.

This hands-on IC role reports to the Head of Engineering and offers real ownership over the security program as Guava scales, with direct access to

Qualifications

• 4+ years in security engineering or related roles.
• Experience securing cloud infrastructure (AWS, GCP, or Azure) with IAM and encryption.
• Comfort reading code and collaborating with engineers on fixes.
• Experience with compliance programs SOC 2, HITRUST, HIPAA, ISO 27001, or PCI DSS.

Responsibilities

• Own security architecture and hardening across cloud, voice pipeline, and internal systems.
• Design controls for IAM, network segmentation, encryption, and secrets management.
• Collaborate with engineering on secure design reviews, threat modeling, and code-level guidance.
• Provide technical guidance on application, API, cloud, platform, and AI security.
• Support compliance program including evidence collection and control implementation.
• Build and maintain security monitoring, logging, and incident response leadership.
• Manage relationships with external vendors, auditors, and testers; drive remediation.
• Own security tooling and automation as the platform scales.

Skills

Security engineering

Cloud security

Compliance frameworks

Threat modeling

Incident response

Security monitoring

Code review

Tools

SAST/DAST tools

CSPM

SIEM

Job description

Guava is the voice platform for regulated industries and is hiring a Security Engineer to own security across infrastructure, product, and internal systems. You will reduce risk in our cloud environment and voice pipeline, support SOC 2, HITRUST, HIPAA, and PCI-adjacent compliance, and partner with engineering to bake security into the product.

This hands-on IC role reports to the Head of Engineering and offers real ownership over the security program as Guava scales, with direct access to