Security Engineer at Happyrobot.ai

About HappyRobot HappyRobot is the infrastructure for enterprises to build and orchestrate AI workforces. Our AI workers don't just communicate - they make decisions, take action, and run operations autonomously across voice, email, and enterprise systems. Born in Y Combinator (S23) and backed by a16z and Base10 with over $60M raised, we power critical operations for global enterprises worldwide.   Our platform is battle-tested in the most demanding environments - where AI has real consequences. We started in logistics, built our own voice stack, models, and orchestration layer from the ground up, and are now bringing that infrastructure to every enterprise that runs the real economy. Learn more about our vision in our manifesto. [Upgrade to PRO to see link] ABOUT THE ROLE We are looking for a Security Engineer to join our IT & Security team. As we scale, we need someone to take full ownership of our daily security operations—moving beyond basic IT tasks to focus on infrastructure hardening, vulnerability management, and incident detection. You will be the bridge between compliance requirements and technical execution, ensuring that our AWS/GCP environments are bulletproof while helping the senior team scale security through automation. WHAT YOU’LL DO - Vulnerability Management: Triage CVEs based on exploitability and impact. Drive remediation efforts across engineering teams to meet our strict SLAs. - Infrastructure Hardening: Own the security configuration (hardening) of our cloud infrastructure (AWS/GCP) and internal systems. - Detection & Response: Monitor SIEM/EDR alerts, distinguish signal from noise, and execute escalation protocols for high-severity incidents. - Security Automation: Write scripts in Python or Bash to automate repetitive security tasks and integrate tools via APIs. - Technical Compliance: Document controls and gather evidence for SOC2 and ISO 27001 audits, translating compliance needs into technical reality. MUST-HAVES - 1–3 years of hands-on experience in Security Engineering, SOC, or a technical Blue Team role - Proficiency in AWS or GCP (IAM, network segmentation, logging, and secret management). - Experience with EDR/SIEM solutions (e.g., CrowdStrike, Wazuh, SentinelOne, or Elastic Security). - Ability to read and write basic scripts (Python or Bash) to automate security workflows. - Fluent in English and Spanish. You can explain a technical vulnerability to a developer and a compliance risk to a manager. NICE-TO-HAVES - Experience with Infrastructure as Code (Terraform) - Knowledge of container security (Kubernetes/Docker) - Security certifications (AWS Security Specialty, GCP Professional Security Engineer, or CompTIA Security+) WHY JOIN US? - Opportunity to work at a high-growth AI startup, backed by top investors. - Rapidly growing and backed by top investors including a16z, Y Combinator, and Base10. - Ownership & Autonomy - Take full ownership of projects and ship fast. - Top-Tier Compensation - Competitive salary + equity in a high-growth startup. - Work With the Best - Join a world-class team of engineers and builders   Our Operating Principles Extreme Ownership We take full responsibility for our work, outcomes, and team success. No excuses, no blame-shifting — if something needs fixing, we own it and make it better. This means stepping up, even when it’s not “your job.” If a ball is dropped, we pick it up. If a customer is unhappy, we fix it. If a process is broken, we redesign it. We don’t wait for someone else to solve it — we lead with accountability and expect the same from those around us.   Craftsmanship Putting care and intention into every task, striving for excellence, and taking deep ownership of the quality and outcome of your work. Craftsmanship means never settling for “just fine.” We sweat the details because details compound. Whether it’s a product feature, an internal doc, or a sales call — we treat it as a reflection of our standards. We aim to deliver jaw-dropping customer experiences by being curious, meticulous, and proud of what we build — even when nobody’s watching.   We are “majos” Be friendly & have fun with your coworkers. Always be genuine & honest, but kind. “Majo” is our way of saying: be a good human. Be approachable, helpful, and warm. We’re building something ambitious, and it’s easier (and more fun) when we enjoy the ride together. We give feedback with kindness, challenge each other with respect, and celebrate wins together without ego.   Urgency with Focus Create the highest impact in the shortest amount of time. Move fast, but in the right direction. We operate with speed because time is our most limited resource. But speed without focus is chaos. We prioritize ruthlessly, act decisively, and stay aligned. We aim for high leverage: the biggest results from the simplest, smartest actions. We’re running a high-speed marathon — not a sprint with no strategy.   Talent Density and Meritocracy Hire only people who can raise the average; ‘exceptional performance is the passing grade.’ Ability trumps seniority. We believe the best teams are built on talent density — every hire should raise the bar. We reward contribution, not titles or tenure. We give ownership to those who earn it, and we all hold each other to a high standard. A-players want to work with other A-players — that’s how we win.   First-Principles Thinking Strip a problem to physics-level facts, ignore industry dogma, rebuild the solution from scratch. We don’t copy-paste solutions. We go back to basics, ask why things are the way they are, and rebuild from the ground up if needed. This mindset pushes us to innovate, challenge stale assumptions, and move faster than incumbents. It’s how we build what others think is impossible.   The personal data provided in your application and during the selection process will be processed by Happyrobot, Inc., acting as Data Controller. By sending us your CV, you consent to the processing of your personal data for the purpose of evaluating and selecting you as a candidate for the position. Your personal data will be treated confidentially and will only be used for the recruitment process of the selected job offer. In relation to the period of conservation of your personal data, these will be eliminated after three months of inactivity in compliance with the GDPR and legislation on the protection of personal data. If you wish to exercise your rights of access, rectification, deletion, portability or opposition in relation to your personal data, you can do so through [Upgrade to PRO to see contact] subject to the GDPR. For more information, visit [Upgrade to PRO to see link] By submitting your request, you confirm that you have read and understood this clause and that you agree to the processing of your personal data as described.