{"id":2472450,"url":"https://alion.io/job/outset-platform-security-engineer","title":"Platform Security Engineer","company":{"id":450353,"name":"Outset","domain":"outset.ai","url":"https://alion.io/company/outset-3","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":26,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":210000,"max":300000,"currency":"USD","period":"year","gross":null,"usd_annual":300000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Commander.js","optional":false},{"name":"SIEM","optional":false},{"name":"SRE","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true}],"status":"live","first_seen_at":"2026-10-13T17:26:05Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-14T19:56:52Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Outset invented a better way to do research: AI-powered user interviews.\nGlobal brands like Hubspot, Microsoft, Uber and Nestle use Outset to achieve deeper, qualitative insights about their users at unprecedented speed and scale.\nThe research industry is massive (>$140B and growing) and ripe for disruption. Incumbents are outdated, slow, and burdened by high-cost services. That's our opportunity.\nOutset is backed by top Silicon Valley investors and raised a $30M Series B in December 2025-less than six months after our Series A-led by Radical Ventures with participation from M12 (Microsoft’s venture arm), 8VC, Y Combinator, and Adverb Ventures.\nThe raise follows a breakout year, with our business growing 8x as enterprise customers across industries adopt our category, AI-moderated research, as the new standard for understanding people.\nWe’re a tight-knit team serving some of the world’s largest enterprises.\nWe are looking for an experienced Platform Security Engineer to harden the security of the systems that power our business and products.\nYou will help us secure both our AWS infrastructure and our code base, partnering directly with engineering and other security teams to identify risk, improve architecture, investigate incidents, and build practical security controls. The role combines application, cloud and infrastructure security, detection engineering, and incident investigation.\nDuring security and privacy incidents, you will serve as the lead technical investigator for the platform. You will work closely with the Incident Commander (Head of Security), to determine what happened, understand the impact, preserve relevant evidence, and guide containment and remediation.\nResponsibilities\nIdentify, assess, and help remediate security risks across our AWS infrastructure, Terraform code, application architecture, and product code.\n\nPartner with engineering teams to design secure systems and incorporate security into normal development and operational workflows.\n\nParticipate in security reviews of RFC and PRR documentation, providing clear, actionable feedback on architecture, data flows, access controls, abuse cases, and technical risk.\n\nReview application and infrastructure changes where additional security scrutiny is warranted.\n\nParticipate in external penetration tests, including preparation, technical coordination, analysis of findings, remediation planning, and validation of fixes.\n\nHelp improve the effectiveness and repeatability of the penetration-testing program, with the opportunity to assume ownership of the program over time.\n\nServe as the lead platform investigator during security and privacy incidents, working within the incident-response process led by the Head of Security.\n\nAnalyze application, cloud, identity, network, audit, and infrastructure telemetry to determine the scope, impact, and root cause of incidents.\n\nTranslate investigation findings into containment actions, durable remediations, improved detections, and clear technical documentation.\n\nContribute to the design, implementation, tuning, and maintenance of SIEM detection rules that monitor our platform.\n\nInvestigate and respond to alerts involving AWS infrastructure, application behavior, access patterns, data movement, and other platform activity.\n\nImprove logging and telemetry where existing data is insufficient to detect threats or investigate incidents.\n\nDevelop security tooling and automation that help engineers identify and address vulnerabilities earlier.\n\nPartner with SRE and engineering teams on cloud configuration, identity and access management, secrets management, vulnerability management, and infrastructure hardening.\n\nHelp establish practical security standards that reduce risk without unnecessarily slowing product development.\n\nQualifications\nHands-on experience in application security, cloud security, infrastructure security, or security-focused site reliability engineering.\n\nExperience securing production systems in AWS, including familiarity with identity, networking, logging, data protection, and common cloud attack paths.\n\nStrong working knowledge of Terraform and infrastructure-as-code security practices.\n\nThe ability to assess security across both infrastructure and application layers rather than treating them as separate environments.\n\nExperience reviewing application architecture or source code for security vulnerabilities and design weaknesses.\n\nFamiliarity with common application, API, authentication, authorization, and data-security risks.\n\nExperience investigating complex technical events using application logs, cloud telemetry, audit trails, and other security data.\n\nExperience writing, tuning, or responding to SIEM detection rules.\n\nThe ability to distinguish meaningful security signals from expected production behavior and noisy telemetry.\n\nExperience evaluating penetration-test findings, determining their practical risk, and partnering with engineers on remediation.\n\nStrong scripting or software-development skills for building security tools, automations, and integrations.\n\nDemonstrated proficiency with agentic software development.\n\nSound judgment when balancing security risk, operational reliability, engineering effort, and product priorities.\n\nClear written and verbal communication, including the ability to explain technical risks and recommended actions to both engineering and non-engineering stakeholders.\n\nA collaborative approach that helps engineering teams build safer systems and make informed security decisions.\n\nBonus\nPartnership with IT Security in building and supporting each security domain\n\nTechnical project management experience; ability to build a plan, clarify priorities, and both lead a team of collaborators and yourself to execute with urgency.\n\nExperience serving on a security or privacy incident-response team.\n\nExperience leading technical investigations during security or privacy incidents.\n\nSANS FOR509 training or certification.\n\nPurple teaming experience, including using offensive findings to improve defensive coverage.\n\nExperience owning or coordinating an external penetration-testing program.\n\nExperience with threat modeling, detection engineering, cloud forensics, or security automation.","description_format":"text","description_chars":6243,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Market Research","AI Agents"],"lifecycle":[{"event":"open","at":"2026-10-13T20:14:38Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":26,"reasons":["conf:2","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":300000,"is_top_pay":true},"html_url":"https://alion.io/job/outset-platform-security-engineer","json_url":"https://alion.io/job/outset-platform-security-engineer.json","meta":{"generated_at":"2026-10-14T20:23:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":3972,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":450353},"rest":"https://alion.io/mcp/rest/get_company?id=450353"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foutset-platform-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foutset-platform-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foutset-platform-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/outset-platform-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foutset-platform-security-engineer"}]}