--- title: 'Senior Security Engineer at Plaud' canonical: 'https://feeny.ai/job/senior-security-engineer-plaud-san-francisco-98xexym7rc73' type: 'job' last_seen: '2026-09-09' --- # Senior Security Engineer at Plaud - **Company:** [Plaud](https://feeny.ai/companies/plaud) - **Location:** San Francisco, CA - **Employment:** full-time - **Work type:** hybrid - **Posted:** 2026-05-13 - **Last confirmed live:** 2026-09-09 - **Apply:** https://jobs.ashbyhq.com/Plaud/c2b90220-4121-4913-a932-514b0a0098c0/application **Skills:** Cloud Security, AWS, GCP, CSPM, IAM, IaC, SIEM, IR, SOAR, MITRE ATT&CK, CIS Benchmarks, Checkov, Terraform, Log Source Integration, SOC 2 TII, LLMs, Security Engineering > The Senior Security Engineer owns detection & response and cloud infrastructure security at Plaud, ensuring SOC 2 Type II audit readiness. Responsibilities include remediating credential exposure, deploying SIEM and CSPM, and managing incident response lifecycles while leveraging AI tools for security workflows. ## Job description About Plaud Inc. Plaud is building the real-world AI interface for professionals to amplify intelligence, elevate productivity and performance, loved by over 2,500,000 users worldwide since 2023. With a mission to amplify human intelligence, Plaud captures, structures, and compounds the intelligence generated in conversations — so humans can think better, decide faster, and execute with clarity. Plaud Inc. is a Delaware-incorporated, San Francisco-based company pushing the boundary of human–AI intelligence through a hardware–software combination. With full ISO 27001, ISO 27701, SOC 2, GDPR, EN18031, and HIPAA compliances, Plaud is committed to the highest standards of data security and privacy protection. To learn more about Plaud, please visit https://www.plaud.ai and follow along on Instagram https://www.instagram.com/plaud_official/, X https://twitter.com/PLAUDAI, Facebook https://www.facebook.com/plaudai, Linkedin https://www.linkedin.com/company/plaudai/?viewAsMember=true, and YouTube https://www.youtube.com/@PLAUDAI ## Why You Should Join Us Plaud is building the next generation intelligence infrastructure and interfaces to capture, extract, and utilize intelligence from what people say, hear, see, and think. - Plaud is a bootstrapped, skyrocketing, profitable company with a $300M revenue run rate achieved in just three years. - Define the next-gen paradigm for human-AI interaction. - Gain exposure to cutting-edge AI for Pro tools and play a direct role in our global expansion. - Work with passionate teammates who value innovation, collaboration, and customer success. - Grow your career in a culture that champions continuous learning and fast career development. - Market-competitive compensation, global exposure, and a vibrant, creativity-fueled work atmosphere. ## What you will do - You will own both the detection & response layer and the cloud infrastructure security foundation at Plaud — two domains that must operate in lockstep to deliver SOC 2 Type II audit readiness by Q4 2026. - Cloud & Infrastructure Security — Remediate credential exposure across AWS/GCP production environments, deploy and tune CSPM across all accounts, embed IaC security gates (Checkov/Terraform) into CI/CD, and implement Zero Standing Privileges via JIT/CIEM. - SIEM Build & Detection Engineering — Deploy the SIEM platform and author 30+ MITRE ATT&CK-mapped detection rules spanning cloud telemetry, endpoint, and SaaS — with ongoing tuning to reduce false positives and maintain coverage fidelity. - Incident Response — Own the IR lifecycle end-to-end: develop playbooks across a minimum of 4 incident categories, lead cross-functional response for P1/P2 events, and drive MTTD to ≤60 minutes. - SOC 2 TII Operational Evidence — Produce and maintain the continuous evidence package required for audit — log retention, alert records, control review cadences, and written control narratives for Cloud Security and SecOps domains. - Security Reporting & Risk Governance — Publish monthly security reports to leadership, deliver H1 risk governance reports, and maintain vulnerability SLA compliance ≥90% with clear remediation tracking. ## Skills, qualifications and experience we look for - 5-8 years of hands-on security engineering experience with demonstrable depth in at least one of: cloud security (AWS/GCP, CSPM, IAM, IaC) or security operations (SIEM, IR, SOAR, detection engineering) — and working fluency in the other. - Proven ability to build security infrastructure from zero: tool selection, baseline configuration, and policy definition without inheriting a mature program or existing runbook. - Strong working knowledge of MITRE ATT&CK, CIS Benchmarks (L1/L2), cloud-native security tooling (AWS Security Hub, GCP SCC, or equivalent CSPM), and log source integration across cloud and endpoint layers. - Familiarity with SOC 2 TII control requirements — specifically CC6 (logical access), CC7 (monitoring & detection), and the operational evidence standards expected by a third-party auditor. - Routinely uses LLMs as part of daily security workflow — alert summarization, detection rule generation, SOAR playbook drafting, or IaC policy automation. Will demo last-2-weeks AI usage during interview. ## What we offer 1. Meaningful Ownership An Employee Stock Ownership Plan (ESOP) that gives a real stake in Plaud’s long-term success. 2. High-Impact Environment Work in a fast-moving, product-driven environment where your ideas directly shape the future of AI productivity. 3. Cutting-Edge AI Tools for Productivity Access to best-in-class AI tools, including Cursor, GPT models, Gemini, Claude, and other frontier AI systems to maximize engineering and execution efficiency. 4. Best-in-Class Equipment Choice of top-spec laptops, high-performance workstation setups, and cutting-edge Plaud devices for all new hires. 5. Team & Culture Annual company offsites, team events, and a culture that values craftsmanship, ownership, and velocity. ## About Plaud ## Company Overview - **One-liner**: Plaud builds an AI-powered hardware and software note-taking platform that automatically records, transcribes, and summarizes conversations to help professionals stay present and productive. - **Entity Type**: Private (funding stage not publicly disclosed) - **Headquarters**: San Francisco, California, USA - **Founded**: 2023 - **Founders**: Not publicly listed on the website or in standard search results ## Core Business - Primary industry/industries: AI-powered productivity software and consumer hardware - Target customers: B2C (professionals, knowledge workers, medical practitioners) and B2B (teams and enterprises) - Mission or purpose statement: "Amplify human intelligence" – building the next-generation intelligence infrastructure to capture, extract, and utilize what you say, hear, see, and think. ## Products & Services - **Plaud Note (Hardware)**: An AI note-taking device that records conversations and uses AI to generate transcripts, summaries, action items, and key points. Award-winning hardware design. - **Plaud App (Software)**: Companion app for transcription (112 languages), AI-powered summaries ("Plaud Intelligence"), search ("Ask Plaud"), and export/sharing/integration. Available on mobile and web. - **Plaud Cloud**: Encrypted private cloud sync for cross-device access, with user-controlled data storage (on-device or cloud). - **Subscription Plans**: Free tier (1,200 mins/mo transcription), Pro Plan ($99.99/year), Unlimited Plan ($239.99/year – unlimited transcription). ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed - **Key Metric**: Over 2,000,000 users worldwide since 2023 (as of mid-2026); used in over 170 countries - **Notable Investors/Partners**: Not publicly listed. Featured in major media outlets (unspecified on site). - **Growth Signals**: Rapid user growth to 2M+ in ~3 years; expansion from a single product to a suite with multiple subscription tiers; global office presence (San Francisco, Singapore, Tokyo, Shenzhen, Seattle, Beijing); compliance with ISO27001, ISO27701, GDPR, SOC 2, HIPAA, and EN 18031 – signaling enterprise readiness and expansion. ## Competitive Advantages - **Hardware-Software Integration**: A dedicated hardware device for note-taking (unlike pure software competitors like Otter.ai or Fireflies.ai), enabling frictionless, ambient capture. - **Privacy-First Architecture**: Data is never sold or used to train AI models; encryption in transit and at rest; user controls what syncs; multiple global security certifications (SOC 2, HIPAA, GDPR, ISO). - **Multilingual & Multimodal**: Transcribes in 112 languages and supports multimodal input (voice, potentially more). - **Strong Mission & Brand**: Positioned as "World's No.1 AI Note-taking Brand" with a clear philosophy around "Conversation as Intelligence." ## Strategic Focus - **Scaling the user base**: Targeting 50 million professionals by 2030. - **Enterprise & Healthcare Expansion**: HIPAA compliance and healthcare-specific messaging ("complete charts instantly") indicate a push into medical and enterprise verticals. - **Global Office Build-out**: Establishing engineering, product, and go-to-market teams across US, Asia, and Europe. - **Product Depth**: Moving beyond transcription to become an "intelligence infrastructure" that captures, extracts, and utilizes all forms of human communication. ## Why Work Here - **Mission-Driven**: The company's philosophy ("Amplify Human Intelligence") is central to its culture, and employees are likely working on a product that directly impacts how millions of professionals work. - **Growth Stage**: Rapidly scaling from 2M to a target of 50M users, offering significant career growth opportunities. - **Global & Remote-Friendly**: Offices in San Francisco, Singapore, Tokyo, Shenzhen, Seattle, and Beijing – suggests a distributed, cross-cultural work environment. - **Cutting-Edge Tech**: Working on the frontier of AI (LLMs, speech recognition, hardware-software integration) with a "Pursue SOTA" (State of the Art) value. - **Values-Driven Culture**: Listed values include "Human First," "Act from first principles," "Dare to change," "Use AI to its fullest," and "Let others thrive." - **Perks**: One-year warranty on hardware, lifetime customer support, and a focus on data security (ISO/SOC/HIPAA compliance) indicates a mature engineering and operations culture. ## Sources 1. [Plaud.ai - Homepage](https://www.plaud.ai/) 2. [Plaud.ai - About Us](https://www.plaud.ai/pages/about-us) 3. [Plaud.ai - Our Story](https://www.plaud.ai/pages/our-story) 4. [Plaud - Careers Page](https://jobs.ashbyhq.com/Plaud) ## Other roles at Plaud - [Influencer Marketing Manager - Korea](https://feeny.ai/job/influencer-marketing-manager-korea-plaud-singapore-vwkcsgenbz6z) — Singapore - [Full Stack Engineer (Contractor) - Palo Alto](https://feeny.ai/job/full-stack-engineer-contractor-palo-alto-plaud-san-francisco-0srbbjq9zfsc) — San Francisco, CA - [Full-Stack Engineer - Palo Alto](https://feeny.ai/job/full-stack-engineer-palo-alto-plaud-san-francisco-pg93b9rtbnpd) — San Francisco, CA - [Legal Counsel, Data Security & Compliance](https://feeny.ai/job/legal-counsel-data-security-compliance-plaud-san-francisco-b1me6n84zpk6) — San Francisco, CA - [Senior Intellectual Property Specialist - San Francisco](https://feeny.ai/job/senior-intellectual-property-specialist-san-francisco-plaud-san-francisco-na99bkdagmpm) — San Francisco, CA - [Senior Backend Engineer - Palo Alto](https://feeny.ai/job/senior-backend-engineer-palo-alto-plaud-san-francisco-fyrbr3brtc7j) — San Francisco, CA - [Senior Backend Engineer - SG](https://feeny.ai/job/senior-backend-engineer-sg-plaud-singapore-764n3bt604m1) — Singapore - [Staff Product Manager - San Francisco](https://feeny.ai/job/staff-product-manager-san-francisco-plaud-san-francisco-f7a0pytx5wws) — San Francisco, CA - [Senior Full Stack Engineer - Singapore](https://feeny.ai/job/senior-full-stack-engineer-singapore-plaud-singapore-caph7s9eqhq8) — Singapore - [Graphic Designer - London](https://feeny.ai/job/graphic-designer-london-plaud-london-e89tzsegrqj4) — London, United Kingdom