Senior Engineer, Security & Compliance (US)

Code and Theory is seeking a Senior Security Engineer to lead the implementation of their security and compliance program for SaaS products and client work. This hands-on role involves building security controls, tooling, and automation, working closely with engineering teams to embed security into workflows and protect product and client data. The position emphasizes AI-native development practices and requires expertise in cloud security, CI/CD pipelines, and privacy regulations.

• Build and maintain code security controls across cloud infrastructure and products
• Instrument and operate security monitoring and alerting across cloud environments
• Partner with engineering teams to embed security into CI/CD pipelines
• Implement privacy controls and document data classification, retention, and access controls
• Lead technical implementation of SOC 2 Type II, ISO 27001, and ISO 42001 compliance programs
• Develop, maintain, and test incident response playbooks