Senior Security Engineer

About the role

About Plaud Inc.

Plaud is building the real-world AI interface for professionals to amplify intelligence, elevate productivity and performance, loved by over 3,000,000 users worldwide since 2023. With a mission to amplify human intelligence, Plaud captures, structures, and compounds the intelligence generated in conversations — so humans can think better, decide faster, and execute with clarity.

Plaud Inc. is a Delaware-incorporated, San Francisco-based company. With GDPR, SOC 2 Type II, HIPAA, and EN 18031 compliance, Plaud is committed to the highest standards of data security and privacy protection.

To learn more about Plaud, please visit https://www.plaud.ai and follow along on Instagram https://www.instagram.com/plaud_official/, X https://twitter.com/PLAUDAI, Facebook https://www.facebook.com/plaudai, Linkedin https://www.linkedin.com/company/plaudai/, and YouTube https://www.youtube.com/@PLAUDAI.

Why You Should Join Us

Plaud is building the next generation intelligence infrastructure and interfaces to capture, extract, and utilize intelligence from what people say, hear, see, and think.

- Plaud is a bootstrapped, skyrocketing, profitable company with a $300M revenue run rate achieved in just three years.

- Define the next-gen paradigm for human-AI interaction.

- Gain exposure to cutting-edge AI for Pro tools and play a direct role in our global expansion.

- Work with passionate teammates who value innovation, collaboration, and customer success.

- Grow your career in a culture that champions continuous learning and fast career development.

- Market-competitive compensation, global exposure, and a vibrant, creativity-fueled work atmosphere.

What you will do

- You will own both the detection & response layer and the cloud infrastructure security foundation at Plaud — two domains that must operate in lockstep to deliver SOC 2 Type II audit readiness by Q4 2026.

- Cloud & Infrastructure Security — Remediate credential exposure across AWS/GCP production environments, deploy and tune CSPM across all accounts, embed IaC security gates (Checkov/Terraform) into CI/CD, and implement Zero Standing Privileges via JIT/CIEM.

- SIEM Build & Detection Engineering — Deploy the SIEM platform and author 30+ MITRE ATT&CK-mapped detection rules spanning cloud telemetry, endpoint, and SaaS — with ongoing tuning to reduce false positives and maintain coverage fidelity.

- Incident Response — Own the IR lifecycle end-to-end: develop playbooks across a minimum of 4 incident categories, lead cross-functional response for P1/P2 events, and drive MTTD to ≤60 minutes.

- SOC 2 TII Operational Evidence — Produce and maintain the continuous evidence package required for audit — log retention, alert records, control review cadences, and written control narratives for Cloud Security and SecOps domains.

- Security Reporting & Risk Governance — Publish monthly security reports to leadership, deliver H1 risk governance reports, and maintain vulnerability SLA compliance ≥90% with clear remediation tracking.