Senior Security Engineer

Plaud; Seattle (WA); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Ownership via ESOP

High-impact environment

AI tools for productivity

Top equipment for new hires

Team events and offsites

Job summary

Plaud is seeking a Senior Security Engineer to own the detection, response, and cloud security foundations across its AWS/GCP environments. You will implement SIEM, craft MITRE-aligned rules, and drive incident response with cross-functional teams to shorten MTTR.

You will lead efforts to achieve SOC 2 Type II audit readiness by Q4 2026, develop security controls, and publish regular risk governance updates to leadership.

Qualifications

• 5+ years in security engineering with cloud security or security operations depth.
• Build security infrastructure from zero and define policies without a mature program.
• Strong knowledge of MITRE ATT&CK and cloud-native security tooling.

Responsibilities

• Own detection & response layer and cloud security foundation to achieve SOC 2 Type II readiness by Q4 2026.
• Remediate credential exposure in AWS/GCP production environments and deploy CSPM.</br>Embed IaC security gates into CI/CD.
• Deploy SIEM, author 30+ MITRE-mapped rules for cloud, endpoint, and SaaS, tune to reduce false positives.
• Own IR lifecycle end-to-end, develop playbooks for multiple incident categories, drive fast MTTR.
• Produce continuous security evidence packages and publish monthly security reports to leadership.
• Maintain vulnerability SLA compliance ≥90% with clear remediation tracking.

Skills

Cloud security

Security operations

Incident response

MITRE ATT&CK

LLM-assisted security

Tools

AWS Security Hub

GCP SCC

CSPM

Terraform

Checkov

Job description

About Plaud Inc.

Plaud is building the real-world AI interface for professionals to amplify intelligence, elevate productivity and performance, loved by over 2,000,000 users worldwide since 2023. With a mission to amplify human intelligence, Plaud captures, structures, and compounds the intelligence generated in conversations — so humans can think better, decide faster, and execute with clarity.

Plaud Inc. is a Delaware-incorporated, San Francisco-based company pushing the boundary of human–AI intelligence through a hardware–software combination. With full ISO 27001, ISO 27701, SOC 2, GDPR, EN18031, and HIPAA compliances, Plaud is committed to the highest standards of data security and privacy protection.

To learn more about Plaud, please visit https://www.plaud.ai and follow along on Instagram, X, Facebook, Linkedin, and YouTube.

Why You Should Join Us

Plaud is building the next generation intelligence infrastructure and interfaces to capture, extract, and utilize intelligence from what people say, hear, see, and think.

• Plaud is a bootstrapped, skyrocketing, profitable company with a $250M revenue run rate achieved in just three years.
• Define the next-gen paradigm for human-AI interaction.
• Gain exposure to cutting-edge AI for Pro tools and play a direct role in our global expansion.
• Work with passionate teammates who value innovation, collaboration, and customer success.
• Grow your career in a culture that champions continuous learning and fast career development.
• Market-competitive compensation, global exposure, and a vibrant, creativity-fueled work atmosphere.

What you will do

• You will own both the detection & response layer and the cloud infrastructure security foundation at Plaud — two domains that must operate in lockstep to deliver SOC 2 Type II audit readiness by Q4 2026.
• Cloud & Infrastructure Security — Remediate credential exposure across AWS/GCP production environments, deploy and tune CSPM across all accounts, embed IaC security gates (Checkov/Terraform) into CI/CD, and implement Zero Standing Privileges via JIT/CIEM.
• SIEM Build & Detection Engineering — Deploy the SIEM platform and author 30+ MITRE ATT&CK-mapped detection rules spanning cloud telemetry, endpoint, and SaaS — with ongoing tuning to reduce false positives and maintain coverage fidelity.
• Incident Response — Own the IR lifecycle end-to-end: develop playbooks across a minimum of 4 incident categories, lead cross-functional response for P1/P2 events, and drive MTTD to ≤60 minutes.
• SOC 2 TII Operational Evidence — Produce and maintain the continuous evidence package required for audit — log retention, alert records, control review cadences, and written control narratives for Cloud Security and SecOps domains.
• Security Reporting & Risk Governance — Publish monthly security reports to leadership, deliver H1 risk governance reports, and maintain vulnerability SLA compliance ≥90% with clear remediation tracking.

Skills, qualifications and experience we look for

• 5+ years of hands-on security engineering experience with demonstrable depth in at least one of: cloud security (AWS/GCP, CSPM, IAM, IaC) or security operations (SIEM, IR, SOAR, detection engineering) — and working fluency in the other.
• Proven ability to build security infrastructure from zero: tool selection, baseline configuration, and policy definition without inheriting a mature program or existing runbook.
• Strong working knowledge of MITRE ATT&CK, CIS Benchmarks (L1/L2), cloud-native security tooling (AWS Security Hub, GCP SCC, or equivalent CSPM), and log source integration across cloud and endpoint layers.
• Familiarity with SOC 2 TII control requirements — specifically CC6 (logical access), CC7 (monitoring & detection), and the operational evidence standards expected by a third‑party auditor.
• Routinely uses LLMs as part of daily security workflow — alert summarization, detection rule generation, SOAR playbook drafting, or IaC policy automation. Will demo last-2-weeks AI usage during interview.

What we offer

1. Meaningful Ownership An Employee Stock Ownership Plan (ESOP) that gives a real stake in Plaud’s long-term success.
2. High-Impact Environment Work in a fast-moving, product-driven environment where your ideas directly shape the future of AI productivity.
3. Cutting-Edge AI Tools for Productivity Access to best-in-class AI tools, including Cursor, GPT models, Gemini, Claude, and other frontier AI systems to maximize engineering and execution efficiency.
4. Best-in-Class Equipment Choice of top-spec laptops, high‑performance workstation setups, and cutting‑edge Plaud devices for all new hires.
5. Team & Culture Annual company offsites, team events, and a culture that values craftsmanship, ownership, and velocity.