{"id":127787,"url":"https://alion.io/job/heygen-security-engineer","title":"Security Engineer","company":{"id":48080,"name":"HeyGen","domain":"heygen.com","url":"https://alion.io/company/heygen","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":89,"open_postings":20,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":165,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States","Los Angeles, United States","Palo Alto, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":148000,"max_usd":338000,"period":"year","method":"role_country_seniority_unknown","sample_n":3177},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"LLM Guardrails","optional":true}],"status":"live","first_seen_at":"2026-06-30T16:58:02Z","employer_posted_date":"2026-06-30","last_verified_at":"2026-10-16T07:44:14Z","board_verified":true,"closed_at":null,"days_open":107,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":107},"description":"About HeyGen\nAt HeyGen, our mission is to make visual storytelling accessible to all. Over the last decade, visual content has become the preferred method of information creation, consumption, and retention. But the ability to create such content, in particular videos, continues to be costly and challenging to scale. Our ambition is to build technology that equips more people with the power to reach, captivate, and inspire audiences.\nLearn more at www.heygen.com. Visit our Mission and Culture doc here. \nPosition Summary\nAs a Security Engineer at HeyGen, you will own the security posture of one of the fastest-growing AI companies in the world. You will partner directly with engineering teams to ship secure features, harden our cloud infrastructure, and build the compliance and trust programs that unlock enterprise deals. This is a high-impact, high-autonomy role for an engineer who thinks in threat models and ships code.\nKey Responsibilities\nProduct & Infrastructure Security: Partner with engineering teams as an embedded security expert - writing code, reviewing architectures, and building secure application features and infrastructure components from the ground up.\nFraud Detection & Remediation: Design and implement automated fraud detection systems to mitigate platform abuse, credential stuffing, and payment fraud. Partner with product and engineering to build real-time monitoring and rapid-response remediation workflows.\nCloud & Vulnerability Management: Own the strategy and execution for hardening our AWS/Python infrastructure. Build and run a robust vulnerability management program, including network security, cloud configuration, and remediation workflows.\nAI Security: Serve as HeyGen's point person for AI and agentic system security. As we scale our agentic coding and AI agent products, you will ensure these rollouts are designed and deployed with strong security controls.\n GRC & Compliance: Oversee our SOC 2 compliance operations (currently managed via Drata) and annual audit cycles. Evaluate and roadmap future certifications, including ISO 27001, as the business scales.\n Trust & Safety Oversight: Provide high-level oversight for platform abuse and content moderation (in partnership with growth and avatar teams), and serve as the escalation point for IT security incidents.\nQualifications\nStrong software engineering background with hands-on Python and AWS experience; you write code, not just policies.\nDemonstrated experience securing cloud infrastructure and applications - vulnerability management, network security, IAM, and secrets management.\nFamiliarity with GRC frameworks and compliance programs (SOC 2, ISO 27001, or equivalent).\nExcellent communication skills: able to translate threat models for engineers, compliance requirements for auditors, and security architecture for enterprise CISOs.\nComfortable with ambiguity and rapid scale; you prioritize ruthlessly and know when to build vs. buy.\nExperience with modern security tooling is a plus (Drata, Infisical, Bugcrowd, or equivalents).\nWhy HeyGen:\nMassive Scale, Unique Problems: We are protecting user identity at one of the fastest growth rates in SaaS history. The security engineering challenges here are genuinely novel.\nSpeed with Guardrails: Our security philosophy is not about saying \"no.\" It is about building guardrails that let the engineering team ship fast without introducing unacceptable risk.\nMature Tooling from Day One: We already run Drata for GRC, Infisical for secrets management, and a private bug bounty program via Bugcrowd. You are not starting from zero.\n Autonomy and Ownership: You will have the visibility and resources to shape HeyGen's entire security roadmap. Small team, big mandate.","description_format":"text","description_chars":3732,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Generative Video"],"lifecycle":[{"event":"open","at":"2026-06-30T16:58:02Z"}],"visa":[],"liveness":{"score":52,"band":"ok","label":"Likely open","p_open":1,"p_active":0.725,"p_room":0.72,"age_days":107,"expected_fill_days":165,"reasons":["conf:2","velocity","win:mid","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/heygen-security-engineer","json_url":"https://alion.io/job/heygen-security-engineer.json","meta":{"generated_at":"2026-10-16T10:47:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9393,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48080},"rest":"https://alion.io/mcp/rest/get_company?id=48080"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fheygen-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fheygen-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fheygen-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/heygen-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fheygen-security-engineer"}]}