Security Engineer

Job Summary

Focused on ensuring robust security measures, the full-time remote Security Engineer will review and adversarially test a B2C AI-assisted patent intelligence platform, driving SOC 2 Type II readiness and coordinating with various engineering teams.

Key responsibilities

• Threat-model the B2C architecture, emphasizing account isolation and external access security
• Run adversarial tenant-isolation testing and verify data-protection controls, including encryption and content handling
• Map SOC 2 Type II controls and drive evidence collection, coordinating with the GRC team

Required qualifications

• Experience with multi-tenant isolation and PostgreSQL forced RLS
• Proficiency in identity and access management using Amazon Cognito
• Knowledge of application security practices, including OWASP Top 10 and secure code review
• Expertise in cloud security, particularly with AWS services and IAM
• Hands-on experience with SOC 2 Type II compliance and evidence workflows, preferably using Drata