[Hiring] Security Operations Engineer @AssemblyAI

Role Description

AssemblyAI runs a mature, multi-framework security and compliance program—including SOC 2 (all trust criteria), ISO 27001, and PCI 4.0—that protects the infrastructure and customer data behind our industry-leading Voice AI API. We're hiring a Security Operations Engineer to join our IT & Security team and take day-to-day ownership of the operational backbone of that program.

This role is centered on security operations and GRC:

• Running compliance audit cycles end to end
• Gathering and organizing evidence
• Enforcing and verifying controls
• Executing access reviews
• Managing vulnerability triage and remediation follow-up
• Responding to customer security questionnaires

You'll also have room to grow the technical side of the role. We automate wherever we can, and you'll be encouraged to build scripts, integrations, and tooling that reduce manual toil and improve the program.

This is a high-ownership role on a small team. You'll work closely with engineers across the company, partner with sales and legal on customer-facing security needs, and have a direct hand in how AssemblyAI enforces security across its products, infrastructure, and internal tools—including a rapidly growing landscape of agentic AI development.

Qualifications

• 3+ years of experience in security operations, GRC, IT security, or a related role
• 2+ years of experience with compliance audit cycles
• One or more security certifications—CISA, Security+, AWS Security Specialty, or equivalent
• Experience executing recurring security operations work
• Strong organization skills
• Strong written communication skills
• Proficiency in Python and comfort reading code written by others
• Experience using AI-assisted development tools

Requirements

• Drive SOC 2, ISO 27001, PCI 4.0, and other compliance audit cycles
• Own the compliance automation platform (Vanta)
• Run vendor and third-party risk reviews
• Partner with sales and legal responding to customer and vendor security questionnaires
• Drive vulnerability triage and prioritization across teams
• Monitor and respond to alerts from security tools
• Support incident response for security events
• Maintain and improve security runbooks and documentation
• Build automation to reduce manual burden

Benefits

• Salary range: $180,000 - $220,000 USD
• Competitive equity grants
• 100% employer-paid benefits
• Flexibility of being fully remote
• 401k match up to 4% for US-based full-time team members