You're a Great Fit If YouExperience: 5+ years in infrastructure, platform, or SRE engineering, with direct ownership of security and compliance work at a large organization with an established program (startup experience is a plus)Infrastructure: Strong hands-on experience with AWS, Kubernetes, and infrastructure as code (Terraform)Software Engineering: Able to write and ship production code, not only scriptsCompliance: Hands-on experience taking systems through SOC 2, HIPAA, and GDPR audits from the engineering sideSecurity Remediation: Proven track record remediating CVEs across both infrastructure and softwareAccess Management: Experience designing and operating IAM and access controls in a cloud environmentEducation: Bachelors degree in Computer Science or related field, or equivalent practical experienceProblem Solving: Comfortable owning ambiguous, cross-cutting problems with no existing playbook, and building the process as you goCommunication: Able to translate security and compliance findings into clear, actionable guidance for engineers who arent security specialistsNice-to-havesHands-on with automated security and compliance tooling (e.g., Vanta, SAST/SCA scanners, policy as code)Experience with AI governance frameworksOpen-source contributions in security or infrastructureBackground in a PII/PHI-heavy industry: medtech, healthtech, legal tech, insurance, or defense/securitySalaryAs an early-stage startup, we offer a competitive compensation package that includes base salary, meaningful equity, and benefits. This role suits someone who has seen how security and compliance work at scale in a larger organization and wants the autonomy to evolve that function at a fast-growing startup, someone energized by the idea that the data we protect (PII and PHI running through litigation records) is exactly the kind of data that matters most to get right.