Security & Trust Engineer (SF-based)

alexai; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

FSA / DCFSA / HSA options

Flexible PTO

401(k) plan

Parental leave

Commuter benefits

In-office lunch

Dog-friendly office

Job summary

Alex is hiring its first dedicated Security & Trust Engineer to own information security, compliance, and AI governance at Alex. You will own controls, audits, and processes, and lead customer conversations where a security team decides trust.

The role reports to the CTO and collaborates with Engineering, Sales, and Operations. This office-based role is in San Francisco, five days a week, with benefits including medical insurance, 401(k), and parental leave.

Responsibilities

• Own the customer security review, end to end: infosec questionnaires, SIGs, CAIQs, vendor risk assessments, DPAs, security addenda and turn them around fast.
• Automate the process: build the answer library, evidence repository, and tooling — including AI tooling — to shorten questionnaire turnaround.
• Become our expert on AI risk and regulation: track EU AI Act, GDPR, regional laws and translate into our actions.
• Represent Alex externally: lead security reviews with enterprise prospects, build a trust center and AI governance docs.
• Run compliance and audit: own SOC 2 and roadmap ISO standards, manage auditors and remediation.
• Shift left with Product and Engineering: address security questions at design time.

Job description

About Alex

Alex is the AI recruiter for hiring great people.

Alex interviews, screens, and schedules every candidate – over voice, video, and text – so talent teams hire more great people, faster, without adding TA headcount. The recruiter stays in control: every shortlist is approved by a human, and every relationship and offer is owned by the customer's team.

We're past 1M+ interviews, integrate with 33+ ATS platforms, and 96% of candidates prefer interviewing with Alex. We're revenue-generating, well-funded, backed by premier investors, and are focused on enterprise customers: selling to VPs of Talent Acquisition, CHROs, and CFOs at large employers who are rethinking how hiring gets done at scale.

What we're looking for

We're hiring our first dedicated Security & Trust Engineer to own information security, compliance, and AI governance at Alex.

AI in hiring is one of the most scrutinized categories in enterprise software right now. That means two things: we need a security and compliance program that genuinely holds up, and we need someone who can stand in front of an enterprise CISO and make them confident in it. You'll own both — the controls, audits, and processes behind the scenes, and the customer conversations where a security team decides whether they trust us.

You do not need to be a compliance expert today, but you need to be motivated to own this space. You need to be smart, technical, extremely organized, and genuinely interested in AI risk and security. We'll expect and support you to get deep fast.

You'll report to our CTO and work closely with Engineering, Sales, and Operations.

Your day to day will include:

• Own the customer security review, end to end: Be the single owner of infosec questionnaires, SIGs, CAIQs, vendor risk assessments, DPAs, and security addenda. Turn them around fast, accurately, and without pulling engineers off roadmap. Where deals stall on security, you unstick them.

• Automate the process, don't just staff it: Build the answer library, evidence repository, and tooling — including AI tooling — that takes questionnaire turnaround from weeks to days. The measure of success is that volume goes up while manual effort goes down.

• Become our expert on AI risk and regulation: Own our point of view on the EU AI Act, NYC LL144, GDPR, state AI and biometric laws, bias auditing, and emerging global rules on automated employment decision tools. Track what's changing, translate it into what we actually do, and keep Sales, Product, and leadership ahead of it.

• Represent Alex externally: Lead security, information security, and AI governance calls with enterprise prospects and customers. Build the trust center, security whitepapers, and AI governance documentation that secures Alex as enterprise-grade, leading expert in this space.

• Run compliance and audit: Own SOC 2 and drive the roadmap for what comes next (ISO 27001, ISO 42001, regional requirements). Manage auditors, penetration tests, and compliance platform tooling. Keep certifications current without fire drills.

• Make the controls real: Partner with Engineering to ensure our systems, processes, and technical controls genuinely back up what we tell customers — access management, vendor and subprocessor review, vulnerability triage and remediation, incident response, cloud and CI/CD security posture. Build the risk register and run the program against it.

• Shift left with Product and Engineering: Get involved early on new features and model changes so security, privacy, and AI-governance questions are answered at design time rather than discovered in a customer review.

This role is based in office 5 days a week in San Francisco and reports to our CTO.

Why join

• You own the function: First security and trust hire. You define the program, the posture, and the story — not inherit someone else's.

• The most interesting regulatory frontier in software: AI in hiring is where AI regulation is landing first and hardest. You'll be building a playbook that doesn't exist yet.

• Direct line to revenue: Security review is a live bottleneck in our enterprise GTM motion. Fixing it is visible, measurable, and immediately valuable.

• Room to grow into it: We're hiring for trajectory, not credentials. If you're technical, organized, and hungry to go deep on AI risk, this role will take you further than a information security specialist seat at a larger company.

• Exposure: Work directly with our CTO, CEO, Sales leadership, and enterprise customers' security teams.

• Impact: Help a product that changes how people get hired and gives every candidate a real interview instead of a resume screen, responsibly.

• Upside: Competitive compensation, including equity.

• Benefits:

  • Medical, dental, and vision insurance
  • FSA, DCFSA, HSA options
  • Flexible paid time off (PTO)
  • 401(k) plan
  • Fully paid parental leave program
  • Commuter benefits
  • In office lunch
  • Dog-friendly office

Alex is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic.