Senior Security Engineer - AI-Driven SaaS & Compliance

Code and Theory; United States; On-site; USD 110,000 - 150,000; Full time

Job summary

Code and Theory is seeking a Senior Security Engineer to lead hands-on security and compliance across our SaaS products and client work. You will own controls, tooling, automation, and processes to secure products and client data, partnering with engineering teams to embed security into delivery workflows.

You will implement SOC 2 II, ISO 27001, and privacy controls, monitor cloud environments, and lead incident response.

Qualifications

• 5+ years of hands-on security engineering in SaaS or agency delivery.
• Deep cloud security knowledge (GCP/AWS/Azure) with IAM, networking, logging.
• Hands-on SOC 2 Type II and ISO 27001 control implementation.
• Experience embedding security into CI/CD pipelines with SAST/DAST.
• Familiarity with HIPAA, GDPR, CCPA/CPRA compliance.
• Proficient in security monitoring and incident response.
• Strong cross-functional communication skills.

Responsibilities

• Build and maintain security controls across cloud infra and SaaS products.
• Own SOC 2 Type II, ISO 27001, and ISO 42001 compliance implementation.
• Instrument security monitoring and alerting across cloud environments.
• Integrate security into CI/CD pipelines and enforce policy.
• Implement privacy controls aligned to HIPAA, GDPR, CCPA/CPRA.
• Lead client engagements security provisioning and environments segregation.
• Conduct vendor security assessments and review third-party practices.
• Maintain incident response playbooks and perform forensic analysis.
• Develop AI-specific security controls for agent workflows and data handling.
• Contribute to security questionnaires and RFP responses.

Skills

Security engineering

Cloud security

SOC 2 Type II

ISO 27001

CI/CD security tooling

Privacy regulations

Incident response

AI security

Communication

Education

Certifications: CISSP / CCSP / Cloud Security Specialty

Tools

SIEM tooling

IaC security tooling (Checkov tfsec OPA/Rego)

Job description

Code and Theory is seeking a Senior Security Engineer to lead hands-on security and compliance across our SaaS products and client work. You will own controls, tooling, automation, and processes to secure products and client data, partnering with engineering teams to embed security into delivery workflows.

You will implement SOC 2 II, ISO 27001, and privacy controls, monitor cloud environments, and lead incident response.