Security and Compliance Engineer
STN Inc · Remote
SECURITY AND COMPLIANCE ENGINEER
Platform and software · shared across customers
Reports to: CISO (or VP, Security)
Location: Remote (US) or Pleasanton, CA (hybrid)
Department: Compliance & Security / Compliance
POSITION SUMMARY
The Security and Compliance Engineer owns security operations and compliance posture for the GPU One (GPUaaS) platform. The role maintains SOC 2 and SOC 3 programs, supports customer security requirements during sales and operations, and leads security incident response.
KEY RESPONSIBILITIES
- Maintain SOC 2 Type 2 and SOC 3 compliance programs including control evidence and audit support
- Manage customer security questionnaires, audits, and penetration test coordination
- Operate identity and access management (IAM) for both platform and customer environments
- Drive vulnerability management across infrastructure, platform, and corporate IT
- Investigate security incidents and lead incident response (IR)
- Maintain security policies, standards, and operating procedures
- Support customer security reviews and security-related contract negotiations
- Coordinate with TAM on customer-specific security requirements
- Manage security tooling (SIEM, EDR, vulnerability scanners, IAM/SSO)
- Drive security awareness training and phishing programs across STN
REQUIRED QUALIFICATIONS
- 5+ years in information security, GRC, or security engineering
- Demonstrated SOC 2, ISO 27001, FedRAMP, or comparable compliance experience
- Strong knowledge of cloud security, network security, IAM, and identity federation
- CISSP, CISM, CCSP, or equivalent certification
- Excellent written communication including audit narratives and policy authorship
PREFERRED QUALIFICATIONS
- Multi-tenant or service provider security background
- HIPAA, PCI-DSS, CMMC, or government compliance experience
- Hands-on technical security skills (cloud configuration audit, IR forensics)
- Experience supporting AI/ML or data-sensitive customer workloads