Security Engineer – Cloud & DevSecOps for AI Infra

Baseten; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

Baseten is seeking an experienced Security Engineer to build and continuously enhance the security posture of its ML infrastructure platform. You will be among the first security hires, collaborating with engineering and operations to uphold confidentiality, integrity, and availability across internal and external data.

You will shape security strategy from the ground up, embedding security into the CI/CD pipeline and driving best practices across the organization.

Qualifications

• 3+ years in a Security Engineer or similar role, ideally in a fast-paced startup.
• Strong knowledge of cloud security (AWS/GCP), container security, and IaC best practices.
• Hands-on with security tooling (SIEM, IDS/IPS) and scripting to automate tasks.
• Familiarity with SOC 2, ISO 27001, GDPR and translating requirements into controls.
• Incident response expertise, including forensic analysis.

Responsibilities

• Security architecture design for secure systems and infrastructure, including cloud and containers.
• Lead vulnerability assessments, pen tests, and remediation efforts.
• Develop and maintain incident response processes and post-incident reviews.
• Oversee IAM strategies to ensure proper access controls.
• Support security compliance and audits with policy creation and risk assessments.
• Create and deliver security training to keep the team informed about best practices.
• Partner with DevOps to embed security into the CI/CD pipeline.

Skills

Cloud security

Container security

IaC practices

Incident response

Security automation

Tools

SIEM

IDS/IPS

Vulnerability scanners

Job description

Baseten is seeking an experienced Security Engineer to build and continuously enhance the security posture of its ML infrastructure platform. You will be among the first security hires, collaborating with engineering and operations to uphold confidentiality, integrity, and availability across internal and external data.

You will shape security strategy from the ground up, embedding security into the CI/CD pipeline and driving best practices across the organization.