Senior Security Engineer: AI-Powered Cloud Security

AngelList, LLC; San Francisco (CA); Hybrid; USD 240,000 - 300,000; Full time

Benefits offered by this job

Equity package

Hybrid in-office model

2 days per week in SF

Job summary

AngelList in San Francisco is seeking a hands-on security engineer to design and build the systems that make security a property of our infrastructure, including a unified identity and access layer, cloud security, automated provisioning, and revocation. You will work directly with Infrastructure, Engineering, IT, and Product to roll them out.

We want someone who sees AI as a way to change how security engineering operates—systems that understand context, make decisions, and remediate

Qualifications

• 7+ years in security engineering or cloud security.
• Hands-on AWS/GCP security architecture and IAM.
• Ability to influence security changes through tooling, not mandates.

Responsibilities

• Own AngelList's security foundations across AWS infrastructure, identity, access control, authentication, authorization, and secrets management.
• Design and build security architecture and guardrails into infrastructure-as-code, CI/CD, and developer workflows so secure defaults are automatic.
• Build IAM systems and least-privilege access models that scale across employees, services, and machine identities — including access reviews and privileged access.
• Write security tooling and automation that finds weaknesses and remediates them without human intervention, harnessing AI where it raises decision quality.
• Solve security risks at the platform and architectural level, and contribute to application security through threat modeling, secure design, and vulnerability remediation.

Skills

AWS security

IaC security

CI/CD security

Automation tooling

AI in security

Security in product teams

Tools

Terraform

Kubernetes

Git

Job description

AngelList in San Francisco is seeking a hands-on security engineer to design and build the systems that make security a property of our infrastructure, including a unified identity and access layer, cloud security, automated provisioning, and revocation. You will work directly with Infrastructure, Engineering, IT, and Product to roll them out.

We want someone who sees AI as a way to change how security engineering operates—systems that understand context, make decisions, and remediate