Security Engineer

Stack

Responsibilities

• ▹Collaborate with engineering teams to design and implement secure systems and infrastructure, including cloud (AWS/GCP) environments and container orchestration platforms
• ▹Lead proactive vulnerability assessments, penetration tests, and remediation efforts
• ▹Develop and maintain incident response processes: detection, analysis, containment, eradication, and post-incident reviews
• ▹Oversee identity and access management (IAM) strategies and tools
• ▹Work with operations to ensure compliance with standards such as SOC 2 and ISO 27001, assisting with audits, policy creation, and risk assessments
• ▹Develop and deliver security training programs and documentation for the team
• ▹Partner with DevOps to embed security into the CI/CD pipeline, automating security checks and fostering a "security as code" culture

Requirements

• ▹3+ years of experience in a Security Engineer or similar security-focused role, preferably in a fast-paced startup environment
• ▹Strong knowledge of cloud security (AWS/GCP), container security, and infrastructure-as-code best practices
• ▹Hands-on experience with security tooling (SIEM, IDS/IPS, vulnerability scanners) and scripting languages to automate security tasks
• ▹Familiarity with compliance frameworks such as SOC 2, ISO 27001, and GDPR, with the ability to translate requirements into actionable security controls
• ▹Incident response expertise, including forensic analysis and root cause investigation
• ▹Excellent communication skills and the ability to collaborate with cross-functional teams to promote a security-first culture

Soft skills

What we offer

• ▹Competitive compensation, including meaningful equity
• ▹100% coverage of medical, dental, and vision insurance for employee and dependents
• ▹Flexible PTO policy, including a company-wide Winter Break (offices closed from Christmas Eve to New Year's Day)
• ▹Paid parental leave
• ▹Fertility and family-building stipend through Carrot
• ▹Company-facilitated 401(k)
• ▹Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities

About the company

Baseten powers mission-critical inference for some of the world's most dynamic AI companies, including Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, Baseten helps companies operating at the frontier of AI bring cutting-edge models into production. The company is growing quickly and recently closed a $1.5B Series F round led by Altimeter Capital, Conviction Partners, and Spark Capital.