Senior Security Engineer - AI-Native Platform & Cloud Security

Digital Waffle; San Francisco (CA); On-site; USD 120,000 - 170,000; Full time

Job summary

Digital Waffle in San Francisco is hiring a hands-on Security Engineer to own security across cloud infrastructure, application surfaces and AI agent stacks. You’ll build and scale the security programme from the ground up, working closely with product and infrastructure engineering to embed security into how the business ships.

Role: Security Engineer. You’ll own threat modelling, secure SDLC, cloud hardening, and governance for AI agents, driving remediation and SOC 2 readiness as the company

Qualifications

• 3 to 8 years hands-on information security experience, with core work in security engineering
• Dedicated Security Engineer background with primary domain in infrastructure and cloud security (GCP preferred)
• Track record building security systems end to end: detection and response, secure SDLC and infrastructure hardening
• Prior startup experience (sub-500 headcount) where you built or scaled security infra from scratch
• High-slope career trajectory with clear scope and title growth
• Ambitious, hands-on builder who thrives in ambiguity and owns entire security domains as second hire
• Strategic communicator able to articulate problems and approach at an executive level

Responsibilities

• Own security reviews and threat modelling for new and existing product surfaces across the AI-native platform
• Build and improve core security processes including secure SDLC and detection and response
• Harden cloud and application infrastructure and drive remediation of high-priority risks
• Help define how the business secures AI agents and governs their use, including guardrails, data exposure, prompt-injection and abuse risks
• Support enterprise customer trust through compliance (SOC 2) and customer-facing security needs
• Partner closely with product and infrastructure engineering to embed security into shipping cycles

Skills

Security engineering

Cloud security

Threat modelling

Secure SDLC

Incident detection

Infrastructure hardening

Data exposure controls

Guardrails governance

Prompt-injection risks

SOC 2 compliance

ISO 27001

Tools

GCP

AWS

Azure

Job description

Digital Waffle in San Francisco is hiring a hands-on Security Engineer to own security across cloud infrastructure, application surfaces and AI agent stacks. You’ll build and scale the security programme from the ground up, working closely with product and infrastructure engineering to embed security into how the business ships.

Role: Security Engineer. You’ll own threat modelling, secure SDLC, cloud hardening, and governance for AI agents, driving remediation and SOC 2 readiness as the company