Member of Technical Staff, Security

Profound · New York, New Yorksenior

En corto

▸Ingeniero de seguridad encargado de construir el sistema de seguridad desde cero en una startup con alto crecimiento.
▸Días a día: hardening de AWS, cumplimiento SOC 2, integración de escaneos en CI/CD y gestión de vulnerabilidades.
▸Lo destacable: eres el primer ingeniero de seguridad contratado, con libertad para definir la postura de seguridad de la empresa.

Fluent written and verbal English

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓5+ años en ingeniería de seguridad, con experiencia en entornos SaaS o infraestructura intensiva.
✓Experiencia práctica en programas de cumplimiento SOC 2 Type II.
✓Conocimiento profundo de servicios de seguridad de AWS (IAM, VPC, CloudTrail, GuardDuty, Security Hub).
✓Entendimiento sólido de protocolos de identidad (OAuth, SAML, OIDC).
✓Habilidades prácticas en scripting con Python o Bash para automatizar tareas de seguridad.
✓Capacidad de comunicar riesgos de seguridad en términos de negocio para equipos técnicos y dirigentes.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

AWSIAMVPCCloudTrailGuardDutySecurity HubSOC 2 Type IICI/CDSASTDAST

¿A quién escribirle en Profound?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

Profound is the marketing platform for the age of AI search. The way brands reach people is being rewritten — AI models like ChatGPT, Perplexity, and Google AI Mode are now the answer layer between companies and their customers. We built the platform marketers use to understand, measure, and win in that world: the analytics, intelligence, and agent automation that turn AI search from a threat into a competitive advantage. We went from 0 to a $1B valuation in 18 months. Revenue grew 100x last year. Our customers include 15% of the Fortune 500 like Walmart, Wayfair and U.S. Bank, and innovators like Ramp, MongoDB, and Figma. We are backed by Sequoia, Kleiner Perkins, LSVP, and Khosla Ventures — and we are moving fast enough that the people joining now are building the playbook everyone who comes after them will run. As enterprises integrate AI into critical workflows, they need to trust that the platforms they rely on are secure, compliant, and resilient. That's where you come in. We're hiring a Security Engineer to own Profound's security posture across our platform, infrastructure, and corporate environment. You'll be the first dedicated security hire, which means you'll shape how we approach access control, vulnerability management, compliance, and incident response from the ground up. You'll partner closely with our Engineering and Infrastructure teams to build practical, scalable security systems that protect customer data and enable rapid growth. This role is ideal for someone who sees security as a business accelerator, not a blocker, and who thrives on building rather than auditing. What you'll do In your first 90 days, you'll focus on our most pressing priorities: partnering with our Infrastructure team to harden our AWS environment, driving SOC 2 Type II continuous compliance (defining controls and closing gaps), and integrating security scanning into our CI/CD pipelines. Over time, you'll take on broader responsibility across our security posture: - Enforce least-privilege access controls and conduct regular access reviews across environments - Build and run a vulnerability management program spanning infrastructure, applications, and dependencies - Triage and respond to security findings from automated tooling, bug bounty programs, and third-party assessments - Partner with Infrastructure to implement detection and monitoring capabilities using log aggregation and SIEM tooling - Conduct risk assessments, maintain a risk register, and drive prioritization decisions - Build security policies and procedures that reflect how we actually operate - Lead post-incident reviews and drive systemic improvements Must have - 5+ years in security engineering, with experience in high-growth SaaS or infrastructure-heavy environments - Hands-on experience building or maintaining a SOC 2 compliance program - Strong knowledge of AWS security services and cloud security architecture (IAM, VPC, CloudTrail, GuardDuty, Security Hub) - Deep understanding of identity and authentication protocols (OAuth, SAML, OIDC) - Practical scripting skills in Python or Bash for automating security workflows Strong plus - Experience integrating vulnerability management and security scanning (SAST, DAST, SCA, container scanning) into CI/CD workflows - Familiarity with network security fundamentals (firewalls, DNS, VPNs, segmentation, traffic analysis) - Experience with infrastructure-as-code security (Terraform, CloudFormation) - Background in penetration testing, application security assessments, or CTF competitions - Familiarity with data infrastructure security for systems like ClickHouse or PostgreSQL - Experience with data processing compliance in analytics-heavy environments - Relevant certifications (CISSP, CCSP, AWS Security Specialty, or similar) Who you are - Clear communicator who can translate security risks into business terms for engineering, leadership, and customer-facing teams - Systems t

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.