Security Engineer for AI & Cloud Security

nooks; United States; On-site; USD 200,000 - 315,000; Full time

Benefits offered by this job

Equity

Generous perks

Comprehensive benefits

Job summary

Nooks is seeking its second security engineer to secure an AI-native platform and protect customer data as we scale. You’ll own the security program from the ground up, including guarding AI agents and their use within organizations.

You’ll partner with product and infra teams to embed security into every release, drive remediation of critical risks, and support SOC 2 compliance with enterprise customers across a fast-growing security function.

Qualifications

• 4–5+ years of hands-on information security experience.
• Experience at a startup or early-stage company with autonomy and ownership.
• Strong fundamentals in application and/or cloud security (AWS/GCP).
• Pragmatic judgment to prioritize risk and maximize impact with limited resources.
• Clear communication and a collaborative, low-ego style.

Responsibilities

• Own security reviews and threat modeling for new and existing product surfaces.
• Build and improve core security processes (secure SDLC, detection & response).
• Harden cloud and application infrastructure and drive remediation of high-priority risks.
• Define how we secure AI agents and govern their use (guardrails, data exposure, prompt-injection risks).
• Support enterprise trust: SOC 2 compliance and customer-facing security needs.
• Partner with product and infra engineering to embed security into shipping.

Skills

Hands-on security experience

Startup experience

Cloud security (AWS/GCP)

Risk prioritization

Clear communication

Job description

Nooks is seeking its second security engineer to secure an AI-native platform and protect customer data as we scale. You’ll own the security program from the ground up, including guarding AI agents and their use within organizations.

You’ll partner with product and infra teams to embed security into every release, drive remediation of critical risks, and support SOC 2 compliance with enterprise customers across a fast-growing security function.