Security Engineer
- Montreal, QC, Canada
$150,000 to $250,000 USD / year · Full-time
Applications open in a new tab.
Job details
- Pay
- $150,000 to $250,000 USD / year
- Job type
- Full-time
- Apply by
- Experience
- 3+ years of experience in a Security Engineer or similar security-focused role, preferably in a fast-paced startup environment.
- Posting language
- English
- Posted
Original job description
About Baseten
Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products.
THE ROLE
We are seeking an experienced and proactive Security Engineer to help us build, maintain, and continuously improve the security posture of our rapidly growing ML infrastructure platform. As one of the first dedicated security hires at Baseten, you will work cross-functionally with engineering and operations teams to ensure we’re meeting the highest standards of confidentiality, integrity, and availability. You’ll have an opportunity to shape our security strategy and best practices from the ground up, influencing the way our platform handles sensitive data for both internal and external stakeholders.
Responsibilities
At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status.
We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).
Compensation Range: $150K - $250K
Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products.
THE ROLE
We are seeking an experienced and proactive Security Engineer to help us build, maintain, and continuously improve the security posture of our rapidly growing ML infrastructure platform. As one of the first dedicated security hires at Baseten, you will work cross-functionally with engineering and operations teams to ensure we’re meeting the highest standards of confidentiality, integrity, and availability. You’ll have an opportunity to shape our security strategy and best practices from the ground up, influencing the way our platform handles sensitive data for both internal and external stakeholders.
Responsibilities
- Security architecture and design: Collaborate with engineering teams to design and implement secure systems and infrastructure, including cloud (AWS/GCP) environments and container orchestration platforms.
- Vulnerability management: Lead proactive vulnerability assessments, pen tests, and remediation efforts to ensure our products and infrastructure remain secure.
- Incident response: Develop and maintain incident response processes, including detection, analysis, containment, eradication, and post-incident reviews.
- Identity and access management (IAM): Oversee IAM strategies and tools to ensure the right people have the right level of access to our systems and data.
- Security compliance and audits: Work closely with operations to ensure compliance with relevant standards (e.g., SOC 2, ISO 27001) and assist with audits, policy creation, and risk assessments.
- Employee security training: Develop and deliver security training programs and documentation to keep our team informed about best practices, social engineering threats, and secure coding standards.
- DevSecOps integration: Partner with DevOps teams to embed security into the CI/CD pipeline, automating security checks and fostering a culture of “security as code.”
- 3+ years of experience in a Security Engineer or similar security-focused role, preferably in a fast-paced startup environment.
- Strong knowledge of cloud security (AWS/GCP), container security, and infrastructure-as-code best practices.
- Hands-on experience with security tooling (SIEM, IDS/IPS, vulnerability scanners) and scripting languages to automate security tasks.
- Familiarity with compliance frameworks such as SOC 2, ISO 27001, and GDPR, and the ability to translate requirements into actionable security controls.
- Incident response expertise, including forensic analysis and root cause investigation.
- Excellent communication skills and the ability to collaborate with cross-functional teams to promote a security-first culture.
- Competitive compensation, including meaningful equity
- (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents
- Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!)
- Paid parental leave
- Fertility and family-building stipend through Carrot
- (U.S. only) Company-facilitated 401(k)
- Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities.
At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status.
We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).
Compensation Range: $150K - $250K
More about this job
Responsibilities
Design and improve security for cloud infrastructure, containers, and the ML platform; lead vulnerability assessments, penetration testing, incident response, and identity and access management. Support compliance and audits, train employees, and integrate automated security checks into CI/CD pipelines in partnership with engineering, operations, and DevOps teams.
Requirements
Requires at least three years of experience in a security-focused role, with strong knowledge of AWS or GCP security, container security, and infrastructure-as-code practices. Candidates should have hands-on experience with security tools and scripting, familiarity with SOC 2, ISO 27001, and GDPR, incident response and forensic investigation expertise, and strong cross-functional communication skills.
Skills
- Cloud Security
- AWS
- GCP
- Container Security
- Infrastructure As Code
- Vulnerability Management
- Penetration Testing
- Incident Response
- Forensic Analysis
- Identity And Access Management
- SIEM
- IDS/IPS
- Security Compliance
- DevSecOps
- Scripting
- Security Training
Benefits
- Competitive Compensation
- Equity
- Medical, Dental, And Vision Insurance
- Flexible Paid Time Off
- Company-Wide Winter Break
- Paid Parental Leave
- Fertility And Family-Building Stipend
- 401(k)
- Learning And Networking Opportunities
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Software
- Engineering
Keywords
- AWS
- GCP
- Cloud Security
- ML Infrastructure
- Container Orchestration
- Container Security
- Infrastructure As Code
- Vulnerability Assessments
- Penetration Testing
- Incident Response
- Forensic Analysis
- Root Cause Investigation
- Identity And Access Management
- SIEM
- IDS/IPS
- Vulnerability Scanners
- SOC 2
- ISO 27001
- GDPR
- Security Audits
- Risk Assessments
- DevSecOps
- CI/CD
- Security Automation
- Security As Code
- Secure Coding
- Social Engineering
- Security Training