Security Engineer - Cloud Security & DevSecOps Leader

Baseten; San Francisco, New York (CA, NY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Flexible PTO

Parental leave

Fertility stipend

401(k)

Equity

Learning opportunities

Job summary

Baseten is seeking an experienced Security Engineer to strengthen our ML infrastructure platform. You will help design secure systems, drive vulnerability management, and lead incident response across cross-functional teams in a fast-paced startup.

As an early security hire, you will shape security strategy, IAM governance, and DevSecOps practices aligned with SOC 2, ISO 27001, and GDPR requirements to protect data for internal and external stakeholders.

Qualifications

• 3+ years in a Security Engineer role, preferably in a startup.
• Strong knowledge of cloud security (AWS/GCP) and IAM.
• Hands-on with security tooling and scripting to automate tasks.
• Familiarity with SOC 2, ISO 27001 and GDPR requirements.
• Incident response expertise and cross-functional collaboration.

Responsibilities

• Security architecture and design for cloud environments and platforms.
• Lead vulnerability assessments, pen tests, and remediation.
• Develop and maintain incident response processes.
• Oversee IAM strategies and access controls.
• Support security compliance audits and risk assessments.
• Deliver security training and promote secure coding practices.
• Embed security into CI/CD and DevSecOps workflows.

Skills

Cloud security (AWS/GCP)

Container security

IAM management

Security tooling

Scripting (Python/Bash)

Tools

SIEM

IDS/IPS

Vulnerability scanners

Job description

Baseten is seeking an experienced Security Engineer to strengthen our ML infrastructure platform. You will help design secure systems, drive vulnerability management, and lead incident response across cross-functional teams in a fast-paced startup.

As an early security hire, you will shape security strategy, IAM governance, and DevSecOps practices aligned with SOC 2, ISO 27001, and GDPR requirements to protect data for internal and external stakeholders.