Security Engineer
: Job Details :

About HebbiaThe user interface for AGI- Hebbia is AI that works the way you work. Designed to be generally capable- it can tackle even the most complex tasks, citing answers over any amount of sources. By showing its work, Hebbia empowers users to collaborate with AI on each step and validate responses instead of blindly trusting them. Our mission is to put capable AI in the hands of 1 billion people by 2030.Job DescriptionGiven the high stakes use cases that Hebbia enables, trust and security are at the center of everything we do. This role is for Hebbia's first security engineer, who will be responsible for security infrastructure, design patterns, and guidelines. You will have the opportunity to offer our expertise to technical and non-technical stakeholders.

• Make fundamental infrastructure changes with AWS and Terraform
• Own certifications including SOC-2 compliance
• Design and implement aspects of Hebbia's security program ranging from application security and incident response to data privacy and compliance
• Onboard vulnerability scanners and static code analysis tools, remediating findings from those tools, putting in place security incident monitoring, and building out disaster recovery protocols

This role is based out of our New York City office in Soho. Responsibilities

Infrastructure: Make fundamental infrastructure changes with AWS and Terraform

Compliance: Own audit and certification processing including penetration testing and SOC-2 compliance

Security architecture: Design and implement aspects of Hebbia's security program ranging from application security and incident response to data privacy and compliance

Security tooling: Onboard vulnerability scanners, static code analysis tools, etc. Remediate findings from those tools, put in place security incident monitoring, and building out disaster recovery protocols.

Who You Are

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field. A strong academic background with coursework in data security, cryptography, and secure software development is preferred.
• 10+ years of software development experience with a focus on security, gained at a venture-backed startup or a leading technology firm.
• Deep knowledge of security practices and compliance standards
• Experience with AWS best practices and Terraform
• Autonomous and excited about taking ownership over major initiatives.