Senior Security Engineer

The role

You will implement security improvements, support compliance programs, and assist customers and partners with security assurance. This role involves security reviews, cloud and endpoint protection, vulnerability management, and responding to security questionnaires.

What you will do

• Plan and execute security initiatives across products, infrastructure, and corporate environment
• Conduct security reviews of systems, architecture, and proposed changes
• Improve security policies, technical standards, and operational processes
• Contribute to SOC 2 and ISO 27001 programs through control implementation and audit preparation
• Coordinate internal stakeholders, auditors, and external testing partners
• Implement and maintain security controls across cloud infrastructure and employee endpoints
• Improve identity and access management, secure configuration, endpoint protection, logging, and monitoring
• Investigate security alerts and support incident response
• Identify, assess, and prioritize vulnerabilities across applications, infrastructure, endpoints, and third-party dependencies
• Complete information security questionnaires and respond to security due diligence requests

Required qualifications

• 5+ years of relevant experience in security engineering, information security, or infrastructure engineering with substantial security responsibilities
• Hands-on experience securing cloud environments such as AWS, Google Cloud
• Working knowledge of endpoint security, identity and access management, network security, encryption, and security monitoring
• Experience with vulnerability assessment, risk prioritization, remediation tracking, and verification
• Familiarity with SOC 2 and ISO 27001 controls, audit evidence, and compliance workflows
• Understanding of application security fundamentals, including authentication, authorization, secure coding, and common web application vulnerabilities
• Ability to write scripts or automation in Python, Go, or a similar language
• Strong written and verbal communication skills
• A degree in Computer Science, Information Security, or a related field, or equivalent practical experience

Nice to have

• Supporting customer security questionnaires, enterprise security reviews, or security-related contract discussions
• Coordinating penetration tests and working with engineering teams to remediate findings
• Implementing DDoS protection, web application firewalls, or endpoint detection and response tools
• Working in a growing SaaS company

Benefits

• Stock options for regular Full-time employees
• Medical
• Dental
• Vision
• Life
• EAP
• Legal Services
• 401k plan
• Flexible time off
• Winter Break
• Cutting-edge equipment and branded gear

About the company

Ambient.ai is the category creator and leader in Agentic Physical Security. Founded in 2017, the company uses a reasoning Vision-Language Model to unify monitoring, access control, threat assessment, response, and investigations.