Security Engineer at Clera

Department: Engineering

Setup: On-site
Location: San Francisco, California
Type: Full-time
Level: senior
Posted: Sep 30, 2026

Description

This founding security engineering role will build a security program from scratch for an AI/ML infrastructure company serving leading AI labs and large enterprises. Responsibilities include leading detection and incident response, owning the security roadmap across product, cloud, compliance, and incident response, securing APIs and data systems, operating monitoring and detection capabilities, managing SOC 2 compliance, and translating legal and customer requirements into technical controls. The role requires 5+ years of security engineering experience, incident-response leadership, SOC 2 or comparable framework experience, SIEM or XDR experience, and experience securing AI/ML or sensitive-data systems. It is on-site in San Francisco, California, or Singapore, with visa sponsorship and relocation support available.

Required Skills

Incident response
SOC 2
SIEM/XDR
Threat modeling
Secrets management
Attack surface
Authentication

Additional Information

Required Previous Experiences: 5+ years of hands-on security engineering experience across infrastructure, detection and response, identity, and related domains
Leading security incidents end-to-end from containment through root-cause analysis and follow-up engineering
Implementing or operating SOC 2 or a comparable security framework and translating requirements into technical controls
Setting up and operating SIEM and/or XDR tooling for proactive detection
Securing AI/ML infrastructure, agent execution environments, data platforms, or systems handling untrusted or sensitive data
Attack surface management, abuse and fraud detection, and solo incident response
Building a security program or function from scratch
Working with legal, auditors, and customers on security questionnaires, policy management, and audit processes
Preferred Qualifications: Relevant security certifications or demonstrated expertise through CVEs, security tooling, or bug bounty work
Offensive security experience through bug bounty, pentesting, or red-team work
Systems programming or low-level engineering background
Translation Company Name: Clera