Security & Trust Engineer

Alex AI; San Francisco (CA); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Healthcare

Vision insurance

Dental insurance

401(k)

Unlimited PTO

Office in SF

Company lunches

Company events

Job summary

Alex AI seeks its first dedicated Security & Trust Engineer to own information security, compliance, and AI governance. You will lead security reviews, run SOC 2 readiness, and shape how we address regulatory requirements across global markets.

Based in San Francisco, you’ll partner with CTO, Engineering, Sales, and Operations to build a scalable security program, engage enterprise customers, and define trust-first practices for AI hiring solutions.

Qualifications

• Own information security, compliance, and governance for AI products.
• Manage SOC 2 and other audits with auditors and stakeholders.
• Present security posture to CISOs and enterprise leadership.
• Coordinate across teams to align security with product roadmap.

Responsibilities

• Own the customer security review end to end, including questionnaires and addenda.
• Automate questionnaire turnaround with a reusable evidence library and tooling.
• Lead AI risk/regulation tracking (EU AI Act, GDPR, state laws) and translate to actions.
• Represent Alex externally in security governance calls with prospects and customers.
• Run compliance programs and manage auditors, tests, and tooling.
• Collaborate with Engineering to embed controls and risk management.
• Shift left with Product & Engineering to address security early in design.

Skills

Security governance

Audit management

Regulatory knowledge

AI risk & governance

Vendor risk assessments

Information security controls

Tools

Penetration testing

Security tooling

Job description

What we're looking for

We're hiring our first dedicated Security & Trust Engineer to own information security, compliance, and AI governance at Alex.

AI in hiring is one of the most scrutinized categories in enterprise software right now. That means two things: we need a security and compliance program that genuinely holds up, and we need someone who can stand in front of an enterprise CISO and make them confident in it. You'll own both — the controls, audits, and processes behind the scenes, and the customer conversations where a security team decides whether they trust us.

You do not need to be a compliance expert today, but you need to be motivated to own this space. You need to be smart, technical, extremely organized, and genuinely interested in AI risk and security. We'll expect and support you to get deep fast.

You'll report to our CTO and work closely with Engineering, Sales, and Operations.

Your Day To Day Will Include

• Own the customer security review, end to end: Be the single owner of infosec questionnaires, SIGs, CAIQs, vendor risk assessments, DPAs, and security addenda. Turn them around fast, accurately, and without pulling engineers off roadmap. Where deals stall on security, you unstick them.
• Automate the process, don't just staff it: Build the answer library, evidence repository, and tooling — including AI tooling — that takes questionnaire turnaround from weeks to days. The measure of success is that volume goes up while manual effort goes down.
• Become our expert on AI risk and regulation: Own our point of view on the EU AI Act, NYC LL144, GDPR, state AI and biometric laws, bias auditing, and emerging global rules on automated employment decision tools. Track what's changing, translate it into what we actually do, and keep Sales, Product, and leadership ahead of it.
• Represent Alex externally: Lead security, information security, and AI governance calls with enterprise prospects and customers. Build the trust center, security whitepapers, and AI governance documentation that secures Alex as enterprise-grade, leading expert in this space.
• Run compliance and audit: Own SOC 2 and drive the roadmap for what comes next (ISO 27001, ISO 42001, regional requirements). Manage auditors, penetration tests, and compliance platform tooling. Keep certifications current without fire drills.
• Make the controls real: Partner with Engineering to ensure our systems, processes, and technical controls genuinely back up what we tell customers — access management, vendor and subprocessor review, vulnerability triage and remediation, incident response, cloud and CI/CD security posture. Build the risk register and run the program against it.
• Shift left with Product and Engineering: Get involved early on new features and model changes so security, privacy, and AI-governance questions are answered at design time rather than discovered in a customer review.

This role is based in office in San Francisco and reports to our CTO.

Why join

• You own the function: First security and trust hire. You define the program, the posture, and the story — not inherit someone else's.
• The most interesting regulatory frontier in software: AI in hiring is where AI regulation is landing first and hardest. You'll be building a playbook that doesn't exist yet.
• Direct line to revenue: Security review is a live bottleneck in our enterprise GTM motion. Fixing it is visible, measurable, and immediately valuable.
• Room to grow into it: We're hiring for trajectory, not credentials. If you're technical, organized, and hungry to go deep on AI risk, this role will take you further than a information security specialist seat at a larger company.
• Exposure: Work directly with our CTO, CEO, Sales leadership, and enterprise customers' security teams.
• Impact: Help a product that changes how people get hired and gives every candidate a real interview instead of a resume screen, responsibly.
• Upside: Competitive compensation, including equity.
• Benefits: Healthcare, vision and dental insurance, 401(k), unlimited PTO, beautiful office in SF, company-paid lunches, and great company events.