Security Engineer

Nooks

Security Engineer at Nooks securing AI-native platform and customer data with high ownership and autonomy. Collaborating closely with product and infra engineering teams to enhance security practices.

Posted 6/30/2026full-timeSan Francisco • California • 🇺🇸 United StatesMid-LevelSenior💰 $200,000 - $315,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security reviews, threat modeling, and application and cloud security, particularly within AWS and GCP environments. Proven ability to enhance security processes and collaborate effectively with engineering teams to integrate security into product development.

Highest-signal resume keywords

Information Security ExperienceApplication SecurityCloud Security (AWS/GCP)Security Process ImprovementCompliance (SOC 2)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ReviewsThreat ModelingSecure SDLCRisk RemediationCloud Infrastructure Hardening

Soft Skills

Clear CommunicationCollaborative StylePragmatic Judgment

Industry Keywords

Startup ExperienceCustomer TrustSecurity QuestionnairesData ExposurePrompt-Injection Risks

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud PlatformSDLC

About the role

Key responsibilities & impact

Own security reviews and threat modeling for new and existing product surfaces.
Build and improve core security processes (secure SDLC, detection & response).
Harden our cloud and application infrastructure and drive remediation of high-priority risks.
Help define how we secure AI agents and govern their use — guardrails, data exposure, prompt-injection and abuse risks.
Support enterprise customer trust: security questionnaires, compliance (SOC 2), and customer-facing security needs.
Partner closely with product and infra engineering to embed security into how we ship.

Requirements

What you’ll need

4 - 5+ years of hands-on information security experience.
Experience at a startup or early-stage company; comfort with ambiguity, autonomy, and high ownership.
Strong fundamentals in application and/or cloud security (AWS/GCP).
Pragmatic judgment — able to prioritize risk and do more with less.
Clear communication and a collaborative, low-ego style.

Benefits

Comp & perks

Top-of-market compensation
Offers Equity
Generous perks and comprehensive benefits