Security Engineer

About the role:

We're looking for a Security Engineer to help strengthen Ambient.ai's security posture as we grow. As part of our India Technology Engineering team, you'll work across engineering, IT, and business teams to implement security improvements, support compliance programs, and help customers and partners understand our security practices.

This is a hands-on role spanning security reviews, cloud and endpoint protection, vulnerability management, and customer security assurance. You'll combine technical expertise with clear communication and practical judgment to identify risks and drive improvements through completion.

What you'll do:

Support security initiatives and reviews:

• Help plan and execute security initiatives across our products, infrastructure, and corporate environment.
• Conduct security reviews of systems, architecture, and proposed changes, providing actionable recommendations to engineering and IT teams.
• Improve security policies, technical standards, and operational processes.

Support compliance programs and penetration testing

• Contribute to SOC 2 and ISO 27001 programs through control implementation, evidence collection, audit preparation, and remediation tracking.
• Coordinate internal stakeholders, auditors, and external testing partners to support assessments and penetration tests.
• Work with engineering teams to address findings and validate fixes.

Strengthen cloud and endpoint security

• Implement and maintain security controls across cloud infrastructure and employee endpoints.
• Improve identity and access management, secure configuration, endpoint protection, logging, and monitoring.
• Help strengthen network and application defenses, including DDoS protection and web application firewall controls.
• Investigate security alerts and support incident response and follow-up improvements.

Drive vulnerability management

• Identify, assess, and prioritize vulnerabilities across applications, infrastructure, endpoints, and third-party dependencies.
• Partner with system owners to establish remediation timelines and track findings through closure.
• Improve scanning coverage, reporting, and automation to reduce recurring risks.

Support customer and partner security assurance

• Complete information security questionnaires and respond to security due diligence requests from customers and partners.
• Partner with Sales, Legal, and Engineering on security reviews and security-related contract requirements.
• Provide accurate documentation of our controls and practices, flagging gaps or commitments that require further review.
• Maintain reusable responses and supporting evidence to improve consistency and turnaround time.

What you'll bring:

• 5+ years of relevant experience in security engineering, information security, or infrastructure engineering with substantial security responsibilities.
• Hands-on experience securing cloud environments such as AWS, Google Cloud.
• Working knowledge of endpoint security, identity and access management, network security, encryption, and security monitoring.
• Experience with vulnerability assessment, risk prioritization, remediation tracking, and verification.
• Familiarity with SOC 2 and ISO 27001 controls, audit evidence, and compliance workflows.
• Understanding of application security fundamentals, including authentication, authorization, secure coding, and common web application vulnerabilities.
• Ability to write scripts or automation in Python, Go, or a similar language.
• Strong written and verbal communication skills, including the ability to explain security risks to technical and nontechnical audiences.
• A practical, collaborative approach to balancing security requirements with business needs.
• A degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

Additional experience we value:

• Supporting customer security questionnaires, enterprise security reviews, or security-related contract discussions.
• Coordinating penetration tests and working with engineering teams to remediate findings.
• Implementing DDoS protection, web application firewalls, or endpoint detection and response tools.
• Working in a growing SaaS company.

What success looks like:

• Security initiatives deliver measurable improvements across our cloud, endpoint, and application environments.
• Vulnerabilities and assessment findings are prioritized appropriately and resolved within agreed timelines.
• Compliance evidence is accurate, organized, and available when needed.
• Customers and partners receive timely, consistent, and well-supported security responses.
• Engineering and business teams have a trusted security partner who helps them make informed decisions.

Why join us:

• We are creating an entirely new category within a 120+ billion-dollar physical security industry and looking for team members who are also passionate about our mission to prevent every security incident possible.
• We have an impressive customer roster of F500 companies, including Adobe, SentinelOne, and TikTok.
• Regular Full-time employees receive stock options for the opportunity to share ownership in the success of our company.
• Comprehensive health + welfare package (Medical, Dental, Vision, Life, EAP, Legal Services, 401k plan).
• We offer flexible time off to rest and recharge, including Winter Break (time off between Christmas and New Year's for most roles, depending on customer demand).
• You'll receive everything you need to hit the ground running, including cutting-edge equipment and branded gear.
• Enjoy a full range of opportunities to connect with your awesome co-workers.
• We love to hike, are foodies, and love music! Check out our most recent Ambient Spotify Playlist.

Ambient.ai is proud to be an Equal Opportunity Employer. Ambient does not unlawfully discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), gender identity, gender expression, national origin, ancestry citizenship, age, physical or mental disability, legally protected medical condition, family care status, military or veteran status, marital status, registered domestic partner status, sexual orientation, genetic information, or any other basis protected by local, state, or federal laws. Ambient is an E-Verify participant.