Security Engineer (AI)

Location: Remote in the United States, limited to the US East Coast/Central time zones.

Base salary: $150,000–$200,000 plus equity.

Company

Synthesia is an AI video platform for businesses, headquartered in London with offices and teams across Europe and the US.

What you will do

• Build and own technical security improvements across AWS/GCP cloud infrastructure, Kubernetes, and CI/CD, including shipping production changes directly when needed.
• Design, implement, and iterate on detection and response capabilities across SIEM, EDR/MDR, cloud-native detections, and CNAPP.
• Hunt, investigate, and respond to security alerts and suspicious activity through triage, containment, eradication, recovery, and documented learnings.
• Write detection logic, tooling, and repeatable response playbooks to prevent recurrence and automate appropriate response actions.
• Build internal security tooling and automations using infrastructure as code, scripts, and integrations to reduce toil.
• Report to the Head of Security and work within the Security Operations team.

Requirements

• 5+ years of hands-on security engineering experience, ideally in a cloud-first SaaS environment.
• Hands-on cloud security engineering experience in AWS and/or GCP, including IAM, networking, compute, storage, and logging.
• Kubernetes security experience, including cluster hardening, workload isolation, runtime security, policy controls, and container ecosystems.
• DevOps fundamentals, including CI/CD security, secrets management, artifact integrity, and secure-by-default platform patterns.
• Incident response and investigation experience, including repeatable playbooks and automated response where appropriate.
• Strong programming and scripting skills in Python or a similar language, plus comfort with Terraform or comparable infrastructure-as-code and automation tools.
• A deeply technical security engineering and builder/hacker mindset, with the ability to take ideas from prototype to production and make direct changes in cloud infrastructure and DevOps systems.
• Experience working in a fast-growing startup, scale-up, and/or SaaS company.
• Serious agent coding experience, ideally at the bleeding edge of the field.
• Experience with endpoint security tooling such as CrowdStrike.

Nice to have

• Hands-on experience with Hunters, Wiz, Falcon, Tracebit, Torii, Okta, Google Workspace, StrongDM, GitHub, StepSecurity, and/or Dope Security.
• Relevant information security certification such as AWS Certified Security, GIAC GWEB, OSCP, or CSSLP.

Culture & Benefits

• Remote-friendly work environment.
• Competitive salary and stock options in a fast-growing Series E startup.
• 100% medical, dental, and vision coverage.
• 401(k) plan, paid parental leave, 25 days of annual leave, public holidays, and paid sick leave.
• Regular socials, a referral scheme, a new computer and monitor, and budget and support for conference travel, community events, and content production.