Senior Security Engineer (Application Security)

About Plaud Inc.

Plaud is innovating the next generation of AI-powered interfaces designed to enhance professional productivity and intelligence. Having attracted over 2 million users since 2023, Plaud is dedicated to transforming how humans capture, organize, and leverage knowledge from interactions to improve decision-making and execution.

The company is Delaware-registered and based in San Francisco, blending hardware and software advancements with strict adherence to global security and privacy standards, including ISO 27001, ISO 27701, SOC 2, GDPR, EN18031, and HIPAA compliance.

Why Join Us

• Plaud is an independently funded, highly profitable company with a revenue run rate of $250 million within three years.
• Be part of defining innovative paradigms for human-AI collaboration.
• Engage with advanced AI tools and contribute directly to Plaud's worldwide growth.
• Collaborate with passionate, innovation-driven colleagues committed to customer success.
• Experience a culture fostering rapid career growth and continuous learning.
• Receive competitive market salary, global work exposure, and a stimulating creative environment.

Role Overview

This position focuses on enhancing Plaud's security engineering capabilities, primarily managing application security across our software products. Responsibilities include implementing secure software development lifecycle practices, integrating CI/CD security tools, and progressively securing AI-related product features—an area you will develop expertise with ongoing support.

Key Responsibilities

• Manage secure SDLC practices, including integrating Static and Dynamic Application Security Testing tools (such as Semgrep and CodeQL) within CI/CD pipelines.
• Lead vulnerability assessment processes, triage, and remediation activities.
• Advance into securing AI product components, with opportunities to build expertise in large language model (LLM) and AI security.

Candidate Profile

• Minimum three years of active security engineering experience involving the implementation and delivery of security controls.
• Demonstrable experience in application security supported by practical use of relevant tools and outcomes.
• Ability to independently manage responsibilities and make informed choices in tool and architecture decisions, with available team support.
• Effective communication skills to articulate risk assessments to both engineering teams and leadership.
• Familiarity with security frameworks such as NIST CSF, CIS, OWASP, MITRE ATT&CK, and SOC 2 is advantageous but not mandatory.

Additional Valuable Experience

• Knowledge of cloud and infrastructure security, security operations, data security, hardware and firmware security, and enterprise IT security.
• Exposure to AI/LLM security concerns, including understanding prompt injection and OWASP LLM Top 10 vulnerabilities, is a plus but not required at hiring.

Benefits and Perks

• Equity Participation through an Employee Stock Ownership Plan (ESOP) offering a stake in the company’s long-term success.
• Impactful Work Environment with rapid product development cycles, enabling direct input into future AI productivity tools.
• Access to premier AI productivity technologies including Cursor, GPT models, Gemini, Claude, among others.
• Choice of premium laptops, high-performance workstation setups, and proprietary Plaud hardware for new employees.
• A dynamic team culture with yearly company gatherings and events emphasizing craftsmanship, ownership, and agility.
• Comprehensive Medical and Insurance coverage, including medical insurance and Workers Injury Compensation Act (WICA) protection for all full-time staff.