Senior Security Engineer - Cloud & Compliance

Slope; New York (NY); On-site; USD 200,000 - 250,000; Full time

Job summary

Profound is seeking a Security Engineer to own the security posture across our platform, infrastructure, and corporate environment. You will shape access control, vulnerability management, and incident response from the ground up, partnering with Engineering and Infrastructure to build scalable security systems protecting customer data.

This role values a business-minded security mindset and hands-on building experience, with the first dedicated security hire taking charge of critical early

Qualifications

• 5+ years in security engineering in high-growth SaaS or infrastructure-heavy environments.
• Hands-on experience building or maintaining a SOC 2 compliance program.
• Strong knowledge of AWS security services and cloud security architecture.
• Understanding of identity and authentication protocols (OAuth, SAML, OIDC).
• Scripting skills in Python or Bash for automating security workflows.

Responsibilities

• Harden AWS environment in partnership with Infrastructure.
• Drive SOC 2 Type II continuous compliance, define controls and close gaps.
• Integrate security scanning into CI/CD pipelines.
• Build and run a vulnerability management program across infra, apps, dependencies.
• Triage and respond to security findings from tools, bug bounty, and assessments.
• Partner to implement detection and monitoring using log aggregation and SIEM.
• Conduct risk assessments and maintain a risk register.
• Develop security policies reflecting actual operations and lead post-incident reviews.

Skills

Security engineering

SOC 2 compliance

AWS security

Identity & authentication

Scripting (Python/Bash)

CI/CD security

Security tooling

Tools

AWS IAM

VPC

CloudTrail

GuardDuty

Security Hub

Job description

Profound is seeking a Security Engineer to own the security posture across our platform, infrastructure, and corporate environment. You will shape access control, vulnerability management, and incident response from the ground up, partnering with Engineering and Infrastructure to build scalable security systems protecting customer data.

This role values a business-minded security mindset and hands-on building experience, with the first dedicated security hire taking charge of critical early