Senior Security Engineer

The role

You will own the detection and response layer and the cloud infrastructure security foundation. You will work on cloud and infrastructure security, SIEM build and detection engineering, incident response, SOC 2 Type II operational evidence, and security reporting.

What you will do

• Remediate credential exposure across AWS/GCP production environments
• Deploy and tune CSPM across all accounts
• Embed IaC security gates into CI/CD
• Implement Zero Standing Privileges via JIT/CIEM
• Deploy the SIEM platform
• Author 30+ MITRE ATT&CK-mapped detection rules
• Own the IR lifecycle end-to-end
• Develop playbooks across a minimum of 4 incident categories
• Produce and maintain the continuous evidence package for SOC 2 TII
• Publish monthly security reports to leadership

Required qualifications

• 5-8 years of hands-on security engineering experience with demonstrable depth in at least one of: cloud security (AWS/GCP, CSPM, IAM, IaC) or security operations (SIEM, IR, SOAR, detection engineering
• Proven ability to build security infrastructure from zero
• Strong working knowledge of MITRE ATT&CK, CIS Benchmarks (L1/L2), cloud-native security tooling (AWS Security Hub, GCP SCC, or equivalent CSPM), and log source integration across cloud and endpoint la
• Familiarity with SOC 2 TII control requirements
• Routinely uses LLMs as part of daily security workflow

Nice to have

• Will demo last-2-weeks AI usage during interview

Benefits

• Employee Stock Ownership Plan (ESOP)
• Competitive Compensation
• High-Impact Environment
• Access to best-in-class AI tools, including Cursor, GPT models, Gemini, Claude, and other frontier AI systems
• Choice of top-spec laptops, high-performance workstation setups, and cutting-edge Plaud devices
• Annual company offsites
• Team events

About the company

Plaud is a Delaware-incorporated, San Francisco-based company building the real-world AI interface for professionals. It is a bootstrapped, profitable company with a $300M revenue run rate.