🛠 Tech Stack

💼 About This Role

You'll own the detection & response layer and cloud infrastructure security foundation at Plaud, a rapidly growing AI company. You'll build security from zero to achieve SOC 2 Type II audit readiness by Q4 2026. This role offers high impact in a bootstrapped, profitable startup with cutting-edge AI tools and global exposure.

🎯 What You'll Do

• Remediate credential exposure in AWS/GCP and deploy CSPM across all accounts.
• Deploy SIEM and author 30+ MITRE ATT&CK-mapped detection rules.
• Lead incident response end-to-end for P1/P2 events with MTTD ≤60 minutes.
• Produce continuous evidence package for SOC 2 Type II audit.

📋 Requirements

• 5+ years of hands-on security engineering experience in cloud security or security operations.
• Proven ability to build security infrastructure from zero without existing runbooks.
• Strong working knowledge of MITRE ATT&CK, CIS Benchmarks, and cloud-native security tooling.
• Familiarity with SOC 2 control requirements (CC6, CC7) and operational evidence standards.

✨ Nice to Have

• Experience with IaC security tools like Checkov/Terraform.
• Routine use of LLMs in daily security workflow.
• Experience with Zero Standing Privileges implementation.

🎁 Benefits & Perks

• 📈 Employee Stock Ownership Plan (ESOP) – real stake in long-term success.
• 🔧 Cutting-edge AI tools – access to Cursor, GPT, Gemini, Claude, etc.
• 💻 Best-in-class equipment – top-spec laptops, high-performance workstations.
• 🌍 Annual company offsites and team events.
• 🏥 Medical & Insurance Coverage including WICA for full-time employees.

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Call· 30 min
2. 2Technical Screen· 60 min
3. 3Hiring Manager Interview· 45 min