About this role
Security and Compliance EngineerPlatform and software · shared across customers
Reports to: CISO (or VP, Security)
Location: Remote (US) or Pleasanton, CA (hybrid)
Department: Compliance & Security / Compliance
Position summaryThe Security and Compliance Engineer owns security operations and compliance posture for the GPU One (GPUaaS) platform. The role maintains SOC 2 and SOC 3 programs, supports customer security requirements during sales and operations, and leads security incident response.
Key responsibilitiesMaintain SOC 2 Type 2 and SOC 3 compliance programs including control evidence and audit support
Manage customer security questionnaires, audits, and penetration test coordination
Operate identity and access management (IAM) for both platform and customer environments
Drive vulnerability management across infrastructure, platform, and corporate IT
Investigate security incidents and lead incident response (IR)
Maintain security policies, standards, and operating procedures
Support customer security reviews and security-related contract negotiations
Coordinate with TAM on customer-specific security requirements
Manage security tooling (SIEM, EDR, vulnerability scanners, IAM/SSO)
Drive security awareness training and phishing programs across STN
Required qualifications5+ years in information security, GRC, or security engineering
Demonstrated SOC 2, ISO 27001, FedRAMP, or comparable compliance experience
Strong knowledge of cloud security, network security, IAM, and identity federation
CISSP, CISM, CCSP, or equivalent certification
Excellent written communication including audit narratives and policy authorship
Preferred qualificationsMulti-tenant or service provider security background
HIPAA, PCI-DSS, CMMC, or government compliance experience
Hands-on technical security skills (cloud configuration audit, IR forensics)
Experience supporting AI/ML or data-sensitive customer workloads