Security Engineer - Own Infra & AppSec for AI Platform

Aspiron Search; New York (NY); On-site; USD 120,000 - 150,000; Full time

Job summary

Aspiron Search is partnering with an early-stage AI firm to hire its first dedicated Security Engineer in New York. You will own both infrastructure and application security from day one, defining security bar and shaping the team's trajectory.

The role requires hands-on coding in Python or Go, deep cloud experience (AWS or GCP), and a pragmatic approach to secure design, threat modelling, vulnerability management, and SOC 2 readiness.

Qualifications

• 4+ years in security engineering or infrastructure security.
• AppSec - secure code review, threat modelling, vulnerability classes.
• Strong engineering background and ability to write code (Python or Go).
• Hands-on securing production systems: authN/authZ, data protection, vulnerabilities.
• Strong cloud fundamentals (AWS and/or GCP).
• Pragmatism - building future-proof and secure code.

Responsibilities

• End-to-end application and infrastructure security ownership.
• Protect sensitive customer data and ensure auditability.
• Secure development practices including threat modelling and vulnerability mgmt.
• Detection and response - monitoring, alerts, and SOC 2 readiness.

Skills

Security engineering

Threat modelling

Secure code review

Python or Go

Cloud fundamentals

AuthN/AuthZ

Job description

Aspiron Search is partnering with an early-stage AI firm to hire its first dedicated Security Engineer in New York. You will own both infrastructure and application security from day one, defining security bar and shaping the team's trajectory.

The role requires hands-on coding in Python or Go, deep cloud experience (AWS or GCP), and a pragmatic approach to secure design, threat modelling, vulnerability management, and SOC 2 readiness.