Security Engineer
US$105,000 – US$260,000 / yr base salary
Posted 9 Sep 2026
Advertised as “Senior Security Engineer”
BranchFactor Summary
The original posting with the fluff stripped out
- Management level
- Individual contributor
- Employment
- On-Site
- Contract
- Full-time
- Visa sponsorship
- Offered
| Base salary | US$105,000 – US$260,000 / yr |
|---|
CertificationsAWS Security Specialist, OSWE, CKS, GIAC
About HUD
HUD's mission is to build reliable, fair and open infrastructure for AI data. We want data to be valuable for the people who create it and trustworthy for the labs that train on it. Our team is a quickly growing group of researchers, engineers and operators building the economy that shapes what AI will become. Backed by $16M from top VCs and YC (W25), our marketplace and platform are used by startups, Fortune 500 companies and frontier labs.
About the role
We’re looking for a Security Engineer to own and build HUD’s security program as our first full-time security hire. You will work closely with the rest engineering to secure our product, cloud infrastructure, data workflows, and internal systems. You’ll also lead incident response, SOC 2, and customer trust.
We are securing up to billions in data assets and are looking for someone who can lead security such that our infrastructure is never compromised.
Responsibilities
-
Lead detection and incident response from signal to alert to postmortem
-
Own HUD’s security roadmap across product security, cloud and infrastructure security, corporate security, incident response, and compliance
-
Secure HUD’s APIs, platform, and data systems through threat modeling, design and code reviews, authentication and authorization controls, secrets management, etc.
-
Build monitoring, detection, and incident-response capabilities; lead investigations and postmortems; and turn incidents and emerging threats into durable improvements
-
Own SOC 2 and customer trust, including control design, security questionnaires, policy management, vendor reviews, and audits
-
Partner with legal, commercial, engineering, and operations to translate customer contracts and data-license requirements into enforceable controls for data access, provenance, permitted use, retention, deletion, isolation, and auditability
Experience
You may be a good fit if you have:
-
Strong security engineering fundamentals and hands-on experience across multiple areas such as infrastructure security, detection and response, identity, etc.
-
Experience leading security incidents end-to-end, from detection and containment through root-cause analysis and follow-up engineering work
-
Experience implementing or operating SOC 2 or a comparable security framework, including translating requirements into real technical and operational controls