Security Engineer

🕒 August 13

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 16%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Nous Research

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2023

🤖 Artificial Intelligence

🔬 Science

💰 $50M Series A on 2025-05

Artificial Intelligence • Science

Nous Research is a US-based leader in the open-source AI movement that trains large open-source language models and builds infrastructure to coordinate distributed, unbiased training. Its stated mission is to advance human rights and freedoms by creating and proliferating open-source language models, supporting their unrestricted availability and use, and furthering scientific and popular understanding of these models. The company focuses on applied AI research areas including model architecture, data synthesis, fine-tuning, and reasoning, and provides tooling and platforms (e. g. , Hermes, Nous Portal, Psyche, Nous Chat, simulators) to accelerate model development and deployment.

📋 Description

• Own production security across a multi-cloud footprint spanning AWS, GCP, Azure, and Vercel • Secure multi-tenant SaaS, dedicated VPC, self-hosted Kubernetes, and air-gapped deployments • Secure the Hermes Agent platform across sandboxing, kernel-level file system and network isolation, agent identity, credential controls, egress controls, and trace integrity • Own SOC 2 technical controls, evidence collection, remediation, and ongoing readiness • Harden identity and access management, including SSO and SAML consolidation, least-privilege access reviews, 2FA, and BYOD policies • Lead vulnerability management, penetration testing, incident response, and cloud-native security monitoring • Strengthen the secure software development lifecycle through practical controls, including peer-review requirements, while maintaining high development velocity • Support enterprise deals by completing security questionnaires, leading architecture reviews, and addressing penetration-testing requirements • Partner across engineering, infrastructure, product, FDE, and operations to identify and address security risks

🎯 Requirements

• 8+ years of security engineering experience with deep hands-on expertise in infrastructure and multi-cloud security • Track record securing production SaaS environments and owning security end-to-end at a fast-growing technology company • Strong Kubernetes, identity, and IAM fundamentals • Familiarity with enterprise SSO, SAML, and SCIM • Experience implementing compliance-driven engineering programs such as SOC 2 or ISO 27001 • Strong understanding of vulnerability management, incident response, access controls, penetration testing, and secure software development practices • Interest in securing agentic AI systems and addressing risks across agent identity, tool permissions, prompt injection, and data provenance • Ability to work effectively in a high-velocity, open-source-native engineering culture • Security-minded and pragmatic, with strong judgment balancing protection and development speed • Experience supporting regulated customers, financial services organizations, or air-gapped deployments is nice to have • Prior experience securing AI, machine learning, or open-source systems is nice to have • Experience with detection and response tooling in cloud-native environments is nice to have • Familiarity with kernel-level sandboxing, network isolation, and agent security is nice to have • Experience supporting Fortune 500 security reviews, architecture assessments, and penetration-testing requirements is nice to have