Member of Technical Staff, Security

The role

You will own technical security controls across the platform, cloud infrastructure, and corporate environment. You will work with Engineering, Infrastructure, IT, and the GRC team to maintain effective controls as the company scales.

What you will do

• Run and mature the vulnerability management program across infrastructure, applications, and dependencies
• Triage and respond to findings from automated tooling, bug bounty reports, and third-party assessments
• Enforce least-privilege access and run regular access reviews across environments
• Work with Infrastructure to improve detection and monitoring using log aggregation and SIEM tooling
• Provide engineering evidence that supports continuous SOC 2 compliance
• Support customer security reviews by answering technical questions from enterprise buyers
• Lead post-incident reviews and drive systemic fixes
• Contribute to risk assessments and the risk register

Required qualifications

• 5+ years in security engineering, including time in high-growth SaaS or infrastructure-heavy environments
• Experience supporting or maintaining a SOC 2 program
• Strong knowledge of AWS security services and cloud security architecture (IAM, VPC, CloudTrail, GuardDuty, Security Hub)
• Solid understanding of identity and authentication protocols (OAuth, SAML, OIDC)
• Scripting skills in Python or Bash to automate security workflows

Nice to have

• Experience running vulnerability management and security scanning (SAST, DAST, SCA, container scanning) in CI/CD workflows
• Infrastructure-as-code security experience (Terraform, CloudFormation)
• Familiarity with network security fundamentals (firewalls, DNS, VPNs, segmentation, traffic analysis)
• Background in penetration testing, application security assessments, or CTF competitions
• Familiarity with data infrastructure security for systems like ClickHouse or PostgreSQL
• Experience with data processing compliance in analytics-heavy environments
• Relevant certifications (CISSP, CCSP, AWS Security Specialty, or similar)

Benefits

• Equity
• Full range of benefits and perks

About the company

Profound is an AI marketing platform used by the Fortune 500. It provides research, content, campaigns, and reporting alongside AI agents.