Security Engineer at clera

Department: Engineering

Setup: On-site
Location: San Francisco, California
Type: Full-time
Level: senior
Posted: Sep 23, 2026

Description

This founding security role at an early-stage AI/ML infrastructure company owns the security program from the ground up, covering detection and incident response, security roadmapping, API and data-system security, SOC 2 compliance, customer trust, and data-license controls. The role requires 5+ years of security engineering experience across infrastructure, detection and response, and identity, along with incident leadership, SOC 2, offensive security, SIEM/XDR, abuse detection, attack-surface management, and AI/ML infrastructure experience. It is an on-site position in San Francisco, California, or Singapore, with visa sponsorship and relocation support available.

Required Skills

Incident response
SOC 2
Threat modeling
Secrets management
SIEM/XDR
Fraud detection
Attack surface
Data protection
Authentication

Additional Information

Required Previous Experiences: 5+ years of hands-on security engineering experience across infrastructure, detection and response, and identity domains
Leading security incidents end-to-end from containment through root-cause analysis and follow-up engineering
Implementing or operating SOC 2 or a comparable security framework and translating requirements into technical controls
Hands-on offensive security experience including bug bounty, penetration testing, or red-team work
Setting up and operating SIEM and/or XDR tooling for proactive detection
Abuse and fraud detection and solo incident response
Attack surface management and continuous monitoring of domains and third-party hosting infrastructure
Securing AI/ML infrastructure, agent execution environments, or data platforms handling untrusted or sensitive data
Designing data protection controls covering access, retention, deletion, isolation, and auditability
Preferred Qualifications: Relevant security certifications such as OSCP, AWS Security Specialist, OSWE, CKS, or GIAC
Systems programming or low-level engineering background
Prior experience as an early or sole security hire building a program from scratch at a fast-growing startup