Senior Security Engineer - Cloud, IAM & SOC 2

Profound; New York (NY); On-site; USD 200,000 - 250,000; Full time

Job summary

Profound, a fast-growing AI marketing platform trusted by Fortune 500 companies, seeks a Security Engineer to own controls across cloud and corporate environments. You will partner with Engineering, Infrastructure, IT, and GRC to scale security as the company grows.

In this role you will focus on detection/response, cloud security, vulnerability management, and compliance, delivering robust security posture while enabling product velocity and trust with enterprise customers.

Qualifications

• 5+ years in security engineering in SaaS or infrastructure-heavy environments.
• Experience supporting or maintaining a SOC 2 program.
• Strong knowledge of AWS security services and cloud security architecture (IAM, VPC, CloudTrail, GuardDuty, Security Hub).
• Solid understanding of identity and authentication protocols (OAuth, SAML, OIDC).
• Scripting in Python or Bash to automate security workflows.

Responsibilities

• Own technical security controls across the platform, cloud infrastructure, and corporate environment.
• Tear down high-risk gaps in AWS environment and tune CI/CD and cloud scanning.
• Lead vulnerability management across infrastructure, apps, and dependencies.
• Respond to findings from automated tooling, bug bounty reports, and third-party assessments.
• Enforce least-privilege access and conduct regular access reviews.
• Collaborate to improve detection with SIEM tooling and log aggregation.
• Provide evidence for SOC 2 compliance and support enterprise security reviews.
• Drive post-incident reviews and systemic fixes.

Skills

Security engineering

SOC 2 program

AWS security

IAM/OIDC/SAML

Python/Bash scripting

Tools

Terraform

CloudFormation

CI/CD tooling

SAST/DAST

SIEM

Job description

Profound, a fast-growing AI marketing platform trusted by Fortune 500 companies, seeks a Security Engineer to own controls across cloud and corporate environments. You will partner with Engineering, Infrastructure, IT, and GRC to scale security as the company grows.

In this role you will focus on detection/response, cloud security, vulnerability management, and compliance, delivering robust security posture while enabling product velocity and trust with enterprise customers.