{"id":15598,"url":"https://alion.io/job/profound-security-engineer","title":"Member of Technical Staff, Security","company":{"id":4789,"name":"Profound","domain":"tryprofound.com","url":"https://alion.io/company/profound","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":74,"ghost_share":0.338,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":87,"computed_at":"2026-11-11T05:49:22Z"}},"role":"AI/ML","role_family":"AI/ML","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":200000,"max":250000,"currency":"USD","period":"year","gross":null,"usd_annual":250000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"ClickHouse","optional":false},{"name":"CloudFormation","optional":false},{"name":"DNS","optional":false},{"name":"Figma","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-03-03T21:57:05Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-11T10:16:57Z","board_verified":true,"closed_at":null,"days_open":252,"trust":{"level":"ok","repost_count":1,"flags":["company_stale"],"days_open":252},"description":"Profound is the fastest-growing AI marketing platform, used by 15% of the Fortune 500 including Comcast, Estée Lauder, and Walmart, and innovators like Ramp, MongoDB, and Figma. It is where marketing teams do the work: research, briefs, content, campaigns, reporting, all in one place, alongside agents that carry the load with them.\nBuilt on 2B+ real user prompts and growing, Profound’s data shows you what people ask AI and what the models say back. Profound's AI Marketer joins that data with deep context about our customers to find the opportunities worth acting on, and then puts agents to work: automating reporting, drafting content, auditing pages for readability, running competitive research. It measures what works and gets better every day.\nAs enterprises put AI into critical workflows, they need to trust the platforms they rely on. Profound is SOC 2 Type II certified and sells to security-conscious enterprises, so the security program behind that claim has to keep up with growth.\nWe're hiring a Security Engineer to join our Security Engineering team. You'll own technical security controls across our platform, cloud infrastructure, and corporate environment, with a focus on [detection and response / application security / cloud and IAM / vulnerability management]. You'll work daily with Engineering, Infrastructure, IT, and our GRC team to keep controls effective as we scale.\nThis role fits someone who treats security as a business accelerator and prefers building and improving systems over auditing them.\nWhat you'll do\nIn your first 90 days, you'll learn our environment, take ownership of [focus area], and work with Infrastructure to close the highest-risk gaps in our AWS environment. You'll also tune our existing CI/CD and cloud scanning so findings are accurate, prioritized, and fixed on schedule.\nOver time, you'll take on broader responsibility:\nRun and mature our vulnerability management program across infrastructure, applications, and dependencies, including triage, severity-based remediation targets, and exception handling\n\nTriage and respond to findings from automated tooling, bug bounty reports, and third-party assessments\n\nEnforce least-privilege access and run regular access reviews across environments\n\nWork with Infrastructure to improve detection and monitoring using log aggregation and SIEM tooling\n\nProvide engineering evidence (scans, access reviews, hardening) that supports continuous SOC 2 compliance, working with our GRC team\n\nSupport customer security reviews by answering technical questions from enterprise buyers\n\nLead post-incident reviews and drive systemic fixes\n\nContribute to risk assessments and the risk register, and help set priorities\n\nMust have\n5+ years in security engineering, including time in high-growth SaaS or infrastructure-heavy environments\n\nExperience supporting or maintaining a SOC 2 program\n\nStrong knowledge of AWS security services and cloud security architecture (IAM, VPC, CloudTrail, GuardDuty, Security Hub)\n\nSolid understanding of identity and authentication protocols (OAuth, SAML, OIDC)\n\nScripting skills in Python or Bash to automate security workflows\n\nStrong plus\nExperience running vulnerability management and security scanning (SAST, DAST, SCA, container scanning) in CI/CD workflows\n\nInfrastructure-as-code security experience (Terraform, CloudFormation)\n\nFamiliarity with network security fundamentals (firewalls, DNS, VPNs, segmentation, traffic analysis)\n\nBackground in penetration testing, application security assessments, or CTF competitions\n\nFamiliarity with data infrastructure security for systems like ClickHouse or PostgreSQL\n\nExperience with data processing compliance in analytics-heavy environments\n\nRelevant certifications (CISSP, CCSP, AWS Security Specialty, or similar)\n\nWho you are\nA clear communicator who can explain security risk in business terms to engineers, leadership, and customer-facing teams\n\nA systems thinker who reasons about root causes, blast radius, and scalable control design\n\nSelf-directed, with sound judgment, and effective as part of a team that shares ownership of the program\n\nMotivated to strengthen the security program of a category-defining AI company\n\nCompensation\nThe expected base salary range is $200,000 to $250,000 (NYC). Total compensation includes base salary, equity, and a full range of benefits and perks. Final compensation depends on skills, experience, qualifications, and location, and is set during the interview process. Our recruiting team will share the full package as you move through hiring.\nNote: All official communication from Profound will come from a @tryprofound.com email address. If you're contacted by anyone using a different domain, please disregard and report it as spam.","description_format":"text","description_chars":4763,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Search Engine Optimization (SEO)","Marketing & Sales AI","Social Media Analytics & Listening"],"lifecycle":[{"event":"open","at":"2026-03-03T21:57:05Z"},{"event":"close","at":"2026-09-17T23:19:17Z"},{"event":"reopen","at":"2026-11-10T19:42:33Z"}],"visa":[{"country":"US","licensed_sponsor":false,"adverts_offering_sponsorship_24m":11,"sanctioned_now":false,"evidence":"Offered visa sponsorship in 11 of its adverts here in 24 months","filings_12m":0,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["Alion: sponsorship offered in the employer's own job adverts (24 months)"],"filings_for_role_12m":0}],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.617,"p_room":0.28,"age_days":252,"expected_fill_days":87,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-11-11T05:49:22Z"},"pay":{"stated_usd_annual":250000,"is_top_pay":false},"html_url":"https://alion.io/job/profound-security-engineer","json_url":"https://alion.io/job/profound-security-engineer.json","meta":{"generated_at":"2026-11-11T10:42:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18449,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4789},"rest":"https://alion.io/mcp/rest/get_company?id=4789"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fprofound-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fprofound-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fprofound-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/profound-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fprofound-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":15598}},{"tool":"search_jobs","arguments":{"company":"tryprofound.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":15598},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}