Join Cartesia as a Security Engineer to enhance security across cloud infrastructure and applications in a fast-paced startup environment.
Posted by employer 1 day ago
First seen on Joblaze 5 hours ago
Last verified on the company career page 5 hours ago
Skills & Technologies
What you'll build
- Architect, implement, and manage security across cloud infrastructure
- Collaborate with engineering teams to embed secure coding
- Implement security tools aligned with architectural strategy
- Conduct code reviews and automate security testing
- Lead security documentation and awareness efforts
Must have
- 5+ years of combined software engineering and security engineering experience
- Hands-on expertise in Python, TypeScript, Kubernetes, Terraform
- Proven ability to develop, review, and ship secure software
- Demonstrated experience securing cloud platforms like AWS and GCP
- Strong understanding of application, network, and container security
Nice to have
- Familiarity with compliance frameworks such as SOC-2, HIPAA, ISO 27001, and GDPR
- Comfortable in fast-paced, ambiguous startup environments
- Collaborative team player
Requirements
- Experience
- 5+ years
- Visa
- Sponsorship available
Not disclosed in this posting: compensation.
Benefits
Joblaze summary
In this role, the Security Engineer at Cartesia is responsible for enhancing the security of the company's cloud infrastructure, applications, and data through hands-on technical work and compliance management. The position requires expertise in software engineering, particularly with tools like Python, TypeScript, and Kubernetes, alongside a solid understanding of security frameworks and practices. Ideal candidates will have over five years of experience in both software and security engineering, thriving in a fast-paced startup environment. Cartesia emphasizes collaboration and rapid execution, making it suitable for those who can adapt quickly and influence security strategies.
Joblaze insights
Quick facts
- Is the Security Engineer role remote?
- No — this is an on-site role in San Francisco, CA, United States.
- How much experience is required?
- At least 5 years of relevant experience for this Security Engineer role.
- Where is the role based?
- Cartesia is hiring for this position in San Francisco, CA, United States.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: AWS, CI/CD, GCP, Kubernetes, Python, Terraform.
- Does Cartesia sponsor work visas for this role?
- Yes — the posting indicates visa sponsorship is available for the right candidate.
- What seniority level is this role?
- Cartesia targets mid-level candidates for this position.
- Is this full-time or contract?
- Full-time for this Security Engineer role at Cartesia.
From the original posting
About the Role
We are seeking a Security Engineer with a strong software engineering and DevOps background to enhance our engineering team. This role combines security, compliance, and DevSecOps to ensure our infrastructure is secure, compliant, and efficiently managed. As a key member of the Information Security group, you will maintain and enhance our established compliance programs while driving security excellence across our engineering organization. This role combines hands-on technical and deep compliance expertise to ensure continued customer trust as we scale.
Your Impact
Architect, implement, and manage security across our cloud infrastructure, applications, and data.
Collaborate with engineering teams to embed secure coding, automated testing, and hardened architecture into the development lifecycle.
Implement security tools aligned with architectural strategy and apply them consistently.
Secure AWS, GCP, and other cloud environments for web, API, database, and mobile services.
Rapidly evaluate and contribute to POCs for new security technologies.
Conduct code reviews, automate security testing, and support incident response.
Lead security documentation and awareness efforts across the company.
What You Bring
5+ years of combined software engineering and security engineering experience, with significant exposure to product security.
Hands-on expertise in development and infrastructure, particularly in Python, TypeScript, Kubernetes, Terraform, and CI/CD tools.
Proven ability to develop, review, and ship secure software as part of agile product teams.
Demonstrated experience securing cloud platforms like AWS and GCP.
Strong understanding of application, network, and container security.
Familiarity with compliance frameworks such as SOC-2, HIPAA, ISO 27001, and GDPR.
Comfortable in fast-paced, ambiguous startup environments, with a strong bias for action and the ability to quickly learn, adapt, and figure things out independently.
A collaborative team player who easily gels with engineers across disciplines.
Proven track record of influencing security strategy and driving impactful improvements.
🏦 401(k)
🦖 Your own personal Yoshi
Standard company text repeated across Cartesia's postings is omitted here.