Senior Security Operations Engineer (AI)

TL;DR

Senior Security Operations Engineer (AI): Designing and implementing security frameworks for Voice AI infrastructure with an accent on the intersection of security engineering and operational compliance. Focus on threat modeling, secure code reviews, and maintaining rigorous compliance standards like SOC 2 and PCI 4.0.

Location: Remote (US-based candidates preferred; candidates outside the U.S. are also considered)

Salary: $180,000 - $220,000 USD (for US-based candidates)

Company

AssemblyAI builds high-scale Voice AI models powering the next generation of voice applications, processing millions of hours of audio daily.

What you will do

• Conduct threat modeling and security design reviews for new features, services, and architectural changes.
• Perform secure code reviews focusing on authentication, authorization, secrets management, and data protection.
• Deploy and maintain security tooling (SAST, SCA, DAST, secret scanning, IaC) across the CI/CD pipeline.
• Partner with platform engineering to harden AWS infrastructure and Terraform-managed environments.
• Lead vulnerability triage, remediation, and incident response investigations, including root cause analysis.
• Manage compliance audit cycles for SOC 2, ISO 27001, and PCI 4.0, including evidence gathering and documentation.

Requirements

• 5+ years of experience in security engineering or security operations.
• Hands-on experience managing SOC 2, ISO 27001, or PCI compliance audit cycles.
• Strong AppSec fundamentals (OWASP Top 10, CWE) and threat modeling skills.
• Proficiency in Python and working knowledge of AWS infrastructure (IAM, VPC).
• Familiarity with Infrastructure-as-Code (Terraform) and CI/CD pipeline security.
• Fluency with AI-assisted development tools (e.g., Claude Code, Copilot) is a core expectation.

Nice to have

• Experience securing AI/ML systems or inference infrastructure.
• Security certifications such as CISSP, CSSLP, or AWS Security Specialty.
• Experience working in a high-growth startup environment.
• Experience building SIEM detections and managing triage pipelines.

Culture & Benefits

• Fully remote work environment.
• 100% employer-paid benefits.
• 401k match up to 4% for US-based full-time team members.
• High-ownership, meritocratic culture with a lean team and minimal bureaucracy.
• Competitive equity grants.