Join Baseten as a Security Engineer to shape security strategy for a rapidly growing ML infrastructure platform.
Posted by employer 7 months ago
First seen on Joblaze 1 month ago
Last verified on the company career page 1 day ago
Requirements
Not disclosed in this posting: compensation, work arrangement, visa sponsorship.
Benefits
Joblaze summary
In this role, the Security Engineer at Baseten is responsible for enhancing the security framework of the company's machine learning infrastructure by collaborating with engineering and operations teams. Key skills include expertise in cloud security, vulnerability management, and incident response, along with familiarity with compliance standards like SOC 2 and ISO 27001. This position is ideal for someone with over three years of experience in security roles, particularly in fast-paced startup environments, who is eager to shape security practices from the ground up. As one of the first dedicated security hires, the engineer will play a crucial role in fostering a security-first culture wi
Joblaze insights
Quick facts
From the original posting
THE ROLE
We are seeking an experienced and proactive Security Engineer to help us build, maintain, and continuously improve the security posture of our rapidly growing ML infrastructure platform. As one of the first dedicated security hires at Baseten, you will work cross-functionally with engineering and operations teams to ensure we’re meeting the highest standards of confidentiality, integrity, and availability. You’ll have an opportunity to shape our security strategy and best practices from the ground up, influencing the way our platform handles sensitive data for both internal and external stakeholders.
RESPONSIBILITIES
Security architecture and design: Collaborate with engineering teams to design and implement secure systems and infrastructure, including cloud (AWS/GCP) environments and container orchestration platforms.
Vulnerability management: Lead proactive vulnerability assessments, pen tests, and remediation efforts to ensure our products and infrastructure remain secure.
Incident response: Develop and maintain incident response processes, including detection, analysis, containment, eradication, and post-incident reviews.
Identity and access management (IAM): Oversee IAM strategies and tools to ensure the right people have the right level of access to our systems and data.
Security compliance and audits: Work closely with operations to ensure compliance with relevant standards (e.g., SOC 2, ISO 27001) and assist with audits, policy creation, and risk assessments.
Employee security training: Develop and deliver security training programs and documentation to keep our team informed about best practices, social engineering threats, and secure coding standards.
DevSecOps integration: Partner with DevOps teams to embed security into the CI/CD pipeline, automating security checks and fostering a culture of “security as code.”
REQUIREMENTS
3+ years of experience in a Security Engineer or similar security-focused role, preferably in a fast-paced startup environment.
Strong knowledge of cloud security (AWS/GCP), container security, and infrastructure-as-code best practices.
Hands-on experience with security tooling (SIEM, IDS/IPS, vulnerability scanners) and scripting languages to automate security tasks.
Familiarity with compliance frameworks such as SOC 2, ISO 27001, and GDPR, and the ability to translate requirements into actionable security controls.
Incident response expertise, including forensic analysis and root cause investigation.
Excellent communication skills and the ability to collaborate with cross-functional teams to promote a security-first culture.
BENEFITS
Competitive compensation, including meaningful equity
Paid parental leave
Fertility and family-building stipend through Carrot
(U.S. only) Company-facilitated 401(k)
Standard company text repeated across baseten's postings is omitted here.