Security Engineer

About the role

Conduct is building an AI operating system that simplifies IT complexity for large enterprises. As a Security Engineer you will own the end‑to‑end security posture, combining software development with security operations to protect our platform and meet enterprise customer requirements.

Key responsibilities

• Design and ship security features such as BYOK per tenant, SSO/SCIM integration, and SIEM‑compatible audit logging directly in the codebase.
• Manage enterprise security processes, including completing security questionnaires, handling data‑handling contracts, and acting as the technical liaison for client CISOs.
• Monitor, harden, and remediate the cloud environment, making pragmatic risk‑acceptance decisions.
• Investigate and respond to security alerts across endpoints, cloud, and application layers, and evolve detection and monitoring capabilities.
• Own vulnerability management from triage to resolution and proactively hunt for threats, including supply‑chain risks.

Required profile

• 3‑7 years of experience in a security engineering role, with a track record of shipping security‑focused features.
• Hands‑on experience with enterprise security requirements, such as security questionnaires and data‑handling contracts.
• Comfortable acting as the technical point of contact for developers, CISOs, and clients during due‑diligence.
• Pragmatic judgement to balance security rigor with startup velocity.
• Strong motivation to grow in InfoSec, even if overall experience is on the lower end.

Required skills

• BYOK (Bring Your Own Key) implementation per tenant.
• SSO and SCIM integration.
• SIEM‑compatible audit logging.
• Cloud environment hardening and security recommendations.
• Vulnerability management and remediation.
• Threat hunting and supply‑chain risk assessment.
• Security scanning across infrastructure, applications, and dependencies.