Security Engineer

About the role

Baseten is looking for an experienced Security Engineer to join its rapidly growing ML infrastructure platform. You will be one of the first dedicated security hires, working closely with engineering and operations to protect the confidentiality, integrity, and availability of the platform and its data.

Key responsibilities

• Design and implement secure cloud (AWS/GCP) and container orchestration architectures.
• Lead vulnerability assessments, penetration testing, and remediation activities.
• Develop and maintain incident response processes, including detection, analysis, containment and post‑incident review.
• Oversee identity and access management (IAM) policies and tooling.
• Ensure compliance with standards such as SOC 2, ISO 27001 and support audit activities.
• Create and deliver security training and documentation for staff.
• Integrate security controls into CI/CD pipelines and promote a “security as code” culture.

Required profile

• 3+ years of experience in a security‑focused engineering role, preferably in a fast‑moving startup.
• Strong understanding of cloud security, container security and infrastructure‑as‑code best practices.
• Hands‑on experience with security tooling (SIEM, IDS/IPS, vulnerability scanners) and automation scripting.
• Familiarity with compliance frameworks (SOC 2, ISO 27001, GDPR) and ability to translate requirements into controls.
• Proven incident response and forensic investigation skills.

Required skills

• AWS
• Google Cloud Platform (GCP)
• Container security (Docker, Kubernetes)
• Infrastructure‑as‑code (Terraform, CloudFormation)
• SIEM solutions
• IDS/IPS
• Vulnerability scanning tools
• Scripting languages (Python, Bash, etc.)
• IAM management
• CI/CD pipeline security (DevSecOps)