Senior Security Engineer - AI-Native Platform (Second Hire)

Digital Waffle; San Francisco (CA); On-site; USD 130,000 - 210,000; Full time

Job summary

Digital Waffle is hiring a Security Engineer to own security across cloud infrastructure, application surfaces and the AI agent stack. This hands-on IC role will build the security programme from the ground up, partnering with product and infra engineers to bake security into shipping cycles and to secure AI agents in production.

You will own security reviews, threat modelling, secure SDLC, and remediation of high-priority risks, while helping the company achieve SOC 2 compliance and meet

Qualifications

• 3–8 years hands-on information security experience
• Primary domain in infrastructure and cloud security
• Experience building security systems end-to-end (detection/response, secure SDLC, hardening)
• Previous work at an early-stage or high-growth startup
• Ambitious hands-on builder capable of owning multiple security domains

Responsibilities

• Own security reviews and threat modelling for new and existing product surfaces across the AI-native platform
• Build and improve core security processes including secure SDLC and detection and response
• Harden cloud and application infrastructure and drive remediation of high-priority risks
• Define how the business secures AI agents and governs their use, including guardrails and data exposure
• Support enterprise customer trust through SOC 2 and customer-facing security needs
• Partner with product and infrastructure engineering to embed security into shipping cycles

Skills

Cloud security

Infrastructure security

Threat modelling

Security engineering

Executive communication

Tools

GCP

AWS

Azure

Job description

Digital Waffle is hiring a Security Engineer to own security across cloud infrastructure, application surfaces and the AI agent stack. This hands-on IC role will build the security programme from the ground up, partnering with product and infra engineers to bake security into shipping cycles and to secure AI agents in production.

You will own security reviews, threat modelling, secure SDLC, and remediation of high-priority risks, while helping the company achieve SOC 2 compliance and meet