Security Engineer

📋 Job Overview

We are seeking a Security Engineer with a strong software engineering and DevOps background to enhance our engineering team. This role combines security, compliance, and DevSecOps to ensure our infrastructure is secure, compliant, and efficiently managed. As a key member of the Information Security group, you will maintain and enhance our established compliance programs while driving security excellence across our engineering organization. This role combines hands-on technical and deep compliance expertise to ensure continued customer trust as we scale.

🏢 About Cartesia

Our mission is to architect AI that learns from and interacts with the world like humans do. We're pioneering the model architectures that will make this possible. Our founding team met as PhDs at the Stanford AI Lab, where we invented State Space Models or SSMs, a new primitive for training efficient, large-scale foundation models. Our team combines deep expertise in model innovation and systems engineering paired with a design-minded product engineering team to build and ship cutting edge models and experiences. We're funded by leading investors at Index Ventures and Lightspeed Venture Partners, along with Factory, Conviction, A Star, General Catalyst, SV Angel, Databricks and others. We're fortunate to have the support of many amazing advisors, and 90+ angels across many industries, including the world's foremost experts in AI.

🎯 The Role

This role combines security, compliance, and DevSecOps to ensure our infrastructure is secure, compliant, and efficiently managed. As a key member of the Information Security group, you will maintain and enhance our established compliance programs while driving security excellence across our engineering organization.

✅ Key Responsibilities

• Architect, implement, and manage security across our cloud infrastructure, applications, and data.
• Collaborate with engineering teams to embed secure coding, automated testing, and hardened architecture into the development lifecycle.
• Implement security tools aligned with architectural strategy and apply them consistently.
• Secure AWS, GCP, and other cloud environments for web, API, database, and mobile services.
• Rapidly evaluate and contribute to POCs for new security technologies.
• Conduct code reviews, automate security testing, and support incident response.
• Lead security documentation and awareness efforts across the company.

📌 Required Qualifications

• 5+ years of combined software engineering and security engineering experience, with significant exposure to product security.
• Hands-on expertise in development and infrastructure, particularly in Python, TypeScript, Kubernetes, Terraform, and CI/CD tools.
• Proven ability to develop, review, and ship secure software as part of agile product teams.
• Demonstrated experience securing cloud platforms like AWS and GCP.
• Strong understanding of application, network, and container security.
• Familiarity with compliance frameworks such as SOC-2, HIPAA, ISO 27001, and GDPR.
• Comfortable in fast-paced, ambiguous startup environments, with a strong bias for action and the ability to quickly learn, adapt, and figure things out independently.
• A collaborative team player who easily gels with engineers across disciplines.
• Proven track record of influencing security strategy and driving impactful improvements.

🎁 Benefits

💰 Compensation: Competitive base salary alongside attractive equity package.
🩺 Health Insurance: Fully covered medical insurance along with dental and vision for you and your family.
🧑‍🧑‍🧒‍🧒 Parental Leave: 9 weeks paternity & 12 weeks maternity leave
🏦 401(k)
🚆 Commuter Allowance: A monthly stipend to help you get to and from the office.
🏖️ Flexible PTO: Take as much time as you need to recharge your batteries.
🍲 Meals & Snacks: Lunch, dinner and plenty of snacks, provided daily.
🦖 Your own personal Yoshi

🛂 Visa & Eligibility

🌎 Visa sponsorship: We provide visa sponsorship support and assess each circumstance on a case-by-case basis. However, visa sponsorship is dependent on many factors, including the role you are applying for, and the location you are going to be based, and so we can't always guarantee success. Your Recruiter will work with you to understand your visa sponsorship needs from the first call.