SecOps Engineer

Що робити

• Own and continuously operate our compliance programs (SOC 2 Type 2, HIPAA, ISO 27001): design controls correctly, keep evidence current, and make sure they hold up to independent scrutiny across the full period, not only at the point of testing.
• Design and run our penetration testing and vulnerability management program: define scope, prioritize findings by risk, and track remediation through to closure.
• Own the security architecture of a multi-tenant, AI-driven platform: data isolation between tenants and at the inference/model layer, including third-party infrastructure and GPU providers.
• Harden authentication, authorization, and network-layer defenses across our APIs and integrations, and keep that posture current as the product evolves.
• Keep our security and compliance documentation internally consistent — audits, contracts, architecture records, and public-facing claims should tell the same accurate story and stand up to scrutiny from customers and auditors.