Senior Security Operations Engineer

Responsibilities

• Conduct threat modeling and security design reviews for new features and services
• Perform secure code reviews focusing on authentication, authorization, and data protection
• Deploy and maintain security tooling including SAST, SCA, DAST, and secret scanning
• Partner with platform engineering on AWS resource hardening and Terraform reviews
• Drive vulnerability triage, prioritization, and remediation
• Support SOC 2, ISO 27001, and PCI 4.0 compliance audit cycles
• Respond to customer security questionnaires and RFP inquiries
• Monitor and respond to alerts from endpoint, cloud, and application security tools
• Maintain security runbooks and automate processes using AI-assisted tools

Requirements

• 5+ years of experience in security engineering or security operations
• Hands-on experience with SOC 2, ISO 27001, or PCI compliance audits
• Strong application security fundamentals (OWASP Top 10, CWE)
• Experience with security tooling (SAST, SCA, DAST, IaC scanning)
• Working knowledge of AWS infrastructure and services
• Familiarity with Terraform and CI/CD pipeline security
• Proficiency in Python and ability to read backend code
• Strong written communication skills for documentation and policy writing
• Fluency in using AI-assisted development tools like Claude Code or Copilot

Preferred Qualifications

• Experience securing AI/ML systems or inference infrastructure
• Familiarity with endpoint security platforms and cloud security tooling
• Experience with SIEM detections and incident handling
• Experience managing vulnerability management programs and SLAs
• Security certifications such as CISSP, CSSLP, or AWS Security Specialty
• Experience working in a high-growth startup environment

About the Company

AssemblyAI builds best-in-class Voice AI models powering the next generation of voice applications. The company is a highly capital-efficient, lean team processing millions of hours of audio daily for thousands of customers.