Lead Security Engineer

About the Role

Ai2 is looking for a security leader who can identify and prioritize our biggest security concerns as well as contribute to resolving them. In this role, you'll work collaboratively across the organization to understand our technical landscape, organize and prioritize security concerns, and directly contribute to projects to secure our systems.

Who We Are

At Ai2, you'll be joining a team of top AI researchers and talented engineers who are pushing the boundaries of what's possible. We have projects spanning natural language processing, robotics, artificial assistants, and fully open foundational models. As a Security Engineer, you would be a key part of our core infrastructure team, with a unique opportunity to improve the security of our groundbreaking initiatives.

Your Next Challenge

• Establish and maintain documentation for Ai2's organizational approach to security, including policies, standards, and system security plans (SSPs)
• Maintain and prioritize a backlog of security investments
• Conduct in-depth security assessments to identify and mitigate vulnerabilities across cloud infrastructure, ML pipelines, and application code
• Investigate and respond to security incidents, lead root-cause analysis, and drive remediation to closure
• Build systems and tooling that improve security compliance, observability, and governance (e.g., audit logging, access control, vulnerability management, configuration baselines)
• Partner across research and engineering teams to address security concerns
• Define and evolve security standards, secure-development practices, and documentation to raise the organization's overall security maturity
• Evaluate and secure SaaS platforms and tools that make up our environment (vendor risk assessments, access reviews, data handling review, multi-tenant data isolation)
• Serve as the organization's trusted voice on security: act as a hands-on advisor and sounding board to organizational leaders, helping translate security risk into practical, actionable guidance for teams without deep security expertise

What You'll Need

• Bachelor's Degree and 8–10 years of overall software/infrastructure engineering experience
• 5+ years focused specifically on security engineering, application security, or security architecture, ideally including time owning a security program
• Hands-on experience conducting security and compliance audits, and directly implementing or assessing controls (e.g., experience with NIST 800-171)
• A track record of stepping up to ambiguous, high-stakes problems rather than waiting for a fully scoped mandate — this role will require building a program largely from the ground up
• Strong ability to advise non-security technical leaders (e.g., engineering directors/managers) — translating technical risk into clear, actionable recommendations they can act on without a security background

Pay & Schedule

• Base salary range: $176,400 - $264,600
• Generous bonus plans to provide a competitive compensation package
• On-site work expected from our Seattle offices (requirements vary based on position and team)

Benefits

• Medical, dental, vision, and an employee assistance program for team members and their families
• Health savings account plan, healthcare reimbursement arrangement plan, and health care and dependent care flexible spending account plans
• Company 401k plan
• $125 per month to assist with commuting or internet expenses
• $200 per month for fitness and wellbeing expenses
• Up to ten sick days per year, up to seven personal days per year, up to 20 vacation days per year, and twelve paid holidays throughout the calendar year
• Annual bonuses and participation in the long-term incentive plan

Physical Demands and Work Environment

• Must be able to remain in a stationary position for long periods of time
• Ability to communicate information and ideas so others will understand
• Must be able to exchange accurate information in these situations
• Ability to observe details at close range
• Can work under deadlines