Lead detection and incident response from initial signal through alerting, containment, investigation, postmortem, and follow-up engineering work.
Own the security roadmap across product security, cloud and infrastructure security, corporate security, incident response, and compliance.
Secure HUD’s APIs, platform, and data systems through threat modeling, design and code reviews, authentication and authorization controls, and secrets management.
Build monitoring, detection, and incident-response capabilities and convert incidents and emerging threats into durable security improvements.
Own SOC 2 and customer trust, including control design, security questionnaires, policy management, vendor reviews, and audits.
Partner with legal, commercial, engineering, and operations to enforce requirements for data access, provenance, permitted use, retention, deletion, isolation, and auditability.
Requirements
Strong security engineering fundamentals and hands-on experience across areas such as infrastructure security, detection and response, and identity.
Experience leading security incidents end-to-end, from detection and containment through root-cause analysis and follow-up engineering.
Experience implementing or operating SOC 2 or a comparable security framework and translating requirements into technical and operational controls.
Ability to identify and prioritize material risks, make pragmatic decisions under uncertainty, and drive implementation personally.
Strong communication skills for working with founders, engineers, operations, legal teams, auditors, customers, and external partners.
Preferred experience includes being an early security hire, building a security program from scratch, securing AI/ML infrastructure or systems that run untrusted code, protecting licensed or customer-provided data, finding CVEs, creating security tooling on GitHub, participating in bug bounty programs, giving conference talks, or writing about security incidents.
Preferred certifications include OSCP, AWS Security Specialist, OSWE, CKS, or GIAC certifications.
The company prioritizes technical aptitude and learning potential over a specific number of years of experience.
Benefits
Full-time, on-site employment in the San Francisco Bay Area or Singapore.
Support for relocation and visas for strong full-time candidates to the US or Singapore.
Very competitive compensation.
100% company-covered medical, dental, and vision insurance through Blue Shield of CA for US employees.
Lunch and dinner when working in the office.
Company-wide holiday break from Christmas Eve through New Year’s Day, in addition to PTO and paid holidays.
Equinox membership, 401k, and commuter benefits for US employees.
Unlimited practical access to tokens for ChatGPT, Claude Code, and Cursor.
Hiring process includes two technical interviews and a 2–3 day work trial; applications are rolling.
Salary: Competitive
HUD
The platform to build RL environments. We help improve frontier models across diverse capabilities and help build post-training datasets for doing RFT.