Senior Security Engineer

Description

Full Job Description

Build a safer world with us, one incident at a time.

Ambient.ai is the category creator and leader in Agentic Physical Security. Powered by Ambient Pulsar, the first reasoning Vision-Language Model purpose-built for physical security, our platform seamlessly integrates with existing security cameras and physical access control systems to unify monitoring, access control, threat assessment, response, and investigations through an always-on reasoning layer that augments security operators with superhuman capabilities. The results: 95% fewer false alarms, investigations 20x faster, and 10x faster response.

The momentum speaks for itself: we doubled new ARR in FY26, and have delivered results for world-class customers including Cisco, ServiceNow, SentinelOne, TikTok, Bayer, and MoMA. That kind of momentum creates an environment where great people thrive, and it shows: we recently ranked #71 out of 500 on the Forbes best startup employers list.

Founded in 2017 and backed by Andreessen Horowitz, Y Combinator, and Allegion Ventures, Ambient.ai is on a fast-paced journey to fulfill our mission: prevent every security incident possible.

Ready to learn more? Connect with us on LinkedIn and YouTube

About the role:

We’re looking for a Security Engineer to help strengthen Ambient.ai’s security posture as we grow. As part of our India Technology Engineering team, you’ll work across engineering, IT, and business teams to implement security improvements, support compliance programs, and help customers and partners understand our security practices.

This is a hands-on role spanning security reviews, cloud and endpoint protection, vulnerability management, and customer security assurance. You’ll combine technical expertise with clear communication and practical judgment to identify risks and drive improvements through completion.

What you’ll do:

Support security initiatives and reviews:

• Help plan and execute security initiatives across our products, infrastructure, and corporate environment.

• Conduct security reviews of systems, architecture, and proposed changes, providing actionable recommendations to engineering and IT teams.

• Improve security policies, technical standards, and operational processes.

Support compliance programs and penetration testing

• Contribute to SOC 2 and ISO 27001 programs through control implementation, evidence collection, audit preparation, and remediation tracking.

• Coordinate internal stakeholders, auditors, and external testing partners to support assessments and penetration tests.

• Work with engineering teams to address findings and validate fixes.

Strengthen cloud and endpoint security

• Implement and maintain security controls across cloud infrastructure and employee endpoints.

• Improve identity and access management, secure configuration, endpoint protection, logging, and monitoring.

• Help strengthen network and application defenses, including DDoS protection and web application firewall controls.

• Investigate security alerts and support incident response and follow-up improvements.

Drive vulnerability management

• Identify, assess, and prioritize vulnerabilities across applications, infrastructure, endpoints, and third-party dependencies.

• Partner with system owners to establish remediation timelines and track findings through closure.

• Improve scanning coverage, reporting, and automation to reduce recurring risks.

Support customer and partner security assurance

• Complete information security questionnaires and respond to security due diligence requests from customers and partners.

• Partner with Sales, Legal, and Engineering on security reviews and security-related contract requirements.

• Provide accurate documentation of our controls and practices, flagging gaps or commitments that require further review.

• Maintain reusable responses and supporting evidence to improve consistency and turnaround time.

What you’ll bring:

• 5+ years of relevant experience in security engineering, information security, or infrastructure engineering with substantial security responsibilities.

• Hands-on experience securing cloud environments such as AWS, Google Cloud.

• Working knowledge of endpoint security, identity and access management, network security, encryption, and security monitoring.

• Experience with vulnerability assessment, risk prioritization, remediation tracking, and verification.

• Familiarity with SOC 2 and ISO 27001 controls, audit evidence, and compliance workflows.

• Understanding of application security fundamentals, including authentication, authorization, secure coding, and common web application vulnerabilities.

• Ability to write scripts or automation in Python, Go, or a similar language.

• Strong written and verbal communication skills, including the ability to explain security risks to technical and nontechnical audiences.

• A practical, collaborative approach to balancing security requirements with business needs.

• A degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

Additional experience we value:

• Supporting customer security questionnaires, enterprise security reviews, or security-related contract discussions.

• Coordinating penetration tests and working with engineering teams to remediate findings.

• Implementing DDoS protection, web application firewalls, or endpoint detection and response tools.

• Working in a growing SaaS company.

What success looks like:

• Security initiatives deliver measurable improvements across our cloud, endpoint, and application environments.

• Vulnerabilities and assessment findings are prioritized appropriately and resolved within agreed timelines.

• Compliance evidence is accurate, organized, and available when needed.

• Customers and partners receive timely, consistent, and well-supported security responses.

• Engineering and business teams have a trusted security partner who helps them make informed decisions.

Why join us:

• We are creating an entirely new category within a 120+ billion-dollar physical security industry and looking for team members who are also passionate about our mission to prevent every security incident possible

• We have an impressive customer roster of F500 companies, including Adobe, SentinelOne, and TikTok

• Regular Full-time employees receive stock options for the opportunity to share ownership in the success of our company

• Comprehensive health + welfare package (Medical, Dental, Vision, Life, EAP, Legal Services, 401k plan)

• We offer flexible time off to rest and recharge, including Winter Break (time off between Christmas and New Year’s for most roles, depending on customer demand)

• You’ll receive everything you need to hit the ground running, including cutting-edge equipment and branded gear

• Enjoy a full range of opportunities to connect with your awesome co-workers

• We love to hike, are foodies, and love music! Check out our most recent Ambient Spotify Playlist

Ambient.ai is proud to be an Equal Opportunity Employer. Ambient does not unlawfully discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), gender identity, gender expression, national origin, ancestry citizenship, age, physical or mental disability, legally protected medical condition, family care status, military or veteran status, marital status, registered domestic partner status, sexual orientation, genetic information, or any other basis protected by local, state, or federal laws. Ambient is an E-Verify participant.

Discovered directly from the employer’s public Ashby Job Postings API. The complete public role content and compensation metadata were normalized into safe candidate-facing sections. Complete structured details were extracted from the public authoritative source while preserving the original application link.