Founding Security Engineer at Reducto

San Francisco, California, United States -

Full Time

Start Date

Immediate

Expiry Date

29 Jan, 26

Salary

0.0

Posted On

31 Oct, 25

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Engineering, Compliance, SOC2, HIPAA, Python, Infrastructure Architecture, Security Controls, Risk Management, Proactive Monitoring, CI/CD, Vulnerability Management, Bug Bounty, Customer Security Reviews, Security Strategy, AI, ML

Industry

Software Development

Description

About Reducto Reducto helps AI teams ingest real world enterprise data with state of the art accuracy. The vast majority of enterprise data — from financial statements to health records — is locked in unstructured file formats like PDFs and spreadsheets. We train vision models to read those documents the way a human would, and make it possible to build products, train models, and automate processes at scale. We’ve grown incredibly quickly, growing revenue by 7x YOY, and now work with hundreds of companies ranging from leading AI teams (Harvey, Vanta, Scale), through to enterprise (FAANG, top 3 trading firm). We're raised over 100M from world class investors like A16z, Benchmark, and First Round Capital, and are hiring a Founding Security Engineer to own our security posture and compliance programs as we scale to serve the world's most security-conscious enterprises. We would love to meet you if you: Philosophy: You are your own worst critic. You have a high bar for quality and don't rest until the job is done right—no settling for 90%. We want someone who ships fast, with high agency, and who doesn't just voice problems but actively jumps in to fix them. Experience: You have 3+ years of hands-on security engineering experience, ideally in high-growth startups or cloud-native environments. You've been through at least one SOC2 or similar compliance audit. Technical Depth: You're comfortable reading and auditing code (Python strongly preferred), understanding infrastructure architecture, and implementing security controls across the stack—from application layer to cloud infrastructure. Tools: Build your own tools as needed—whether it's a quick script to audit secrets across repos or an internal dashboard to track security metrics. Approach: A practical, risk-based approach to security. You understand when to say no and when to help engineering ship securely. You can balance security rigor with business velocity and aren't dogmatic about perfect security at the expense of progress. The core work will include: Owning and managing SOC2, HIPAA, and other compliance certifications end-to-end, including evidence collection, control implementation, and audit coordination Implementing proactive security monitoring and alerting systems to detect and respond to threats in real-time across our cloud and on-prem deployments Building and maintaining security CI/CD tooling to catch vulnerabilities before they reach production—static analysis, dependency scanning, secrets detection, and more Managing our relationship with platforms like Vanta to streamline compliance workflows and maintain continuous monitoring Responding to customer security questionnaires and conducting security reviews for enterprise deals Establishing and managing our bug bounty program, triaging vulnerabilities, and coordinating remediation with engineering teams Working directly with the founders and customers to shape our security strategy and build trust with enterprise buyers Bonus points if you: Have prior experience founding a company or building security programs from scratch at early-stage startups Have deep experience with on-prem deployments and air-gapped environments for enterprise customers Have contributed to security tools, written security content, or spoken at security conferences Are ambitious and driven, and care a lot about doing great work with great people Keep up with the latest developments in application security, cloud security, and AI/ML security This is an in person role at our office in SF. We're an early stage company which means that the role requires working hard and moving quickly. Please only apply if that excites you. About Reducto Nearly 80% of enterprise data is in unstructured formats like PDFs PDFs are the status quo for enterprise knowledge in nearly every industry. Insurance claims, financial statements, invoices, and health records are all stored in a structure that's simply impractical for use in digital workflows. This isn't an inconvenience—it's a critical bottleneck that leads to dozens of wasted hours every week. Traditional approaches fail at reliably extracting information in complex PDFs OCR and even more sophisticated ML approaches work for simple text documents but are unreliable for anything more complex. Text from different columns are jumbled together, figures are ignored, and tables are a nightmare to get right. Overcoming this usually requires a large engineering effort dedicated to building specialized pipelines for every document type you work with. Reducto breaks document layouts into subsections and then contextually parses each depending on the type of content. This is made possible by a combination of vision models, LLMs, and a suite of heuristics we built over time. Put simply, we can help you: Accurately extract text and tables even with nonstandard layouts Automatically convert graphs to tabular data and summarize images in documents Extract important fields from complex forms with simple, natural language instructions Build powerful retrieval pipelines using Reducto's document metadata Intelligently chunk information using the document's layout data Benefits at Reducto At Reducto, we're invested in the well-being and growth of our team. Here's what we currently offer: Unlimited PTO: We believe great work requires recharging. Lunch: Receive a free lunch to eat with your teammates daily at the office Reimbursed Transportation: Provide us with your receipts and we'll take care of the costs Insurance: Generous health insurance covering medical, dental, and vision. Health and Wellness Budget: We provide up to $150/mo reimbursement for health and wellness spending, such as gym memberships, fitness classes, or similar. Parental Leave: Work with us to build a leave schedule that works for you and your family Reducto is an Equal Opportunity Employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex, race, color, age, national origin, religion, physical and mental disability, genetic information, marital status, sexual orientation, gender identity/assignment, citizenship, pregnancy or maternity, protected veteran status, or any other status prohibited by applicable national, federal, state or local law.

Responsibilities

The core responsibilities include owning and managing compliance certifications like SOC2 and HIPAA, implementing proactive security monitoring systems, and building security CI/CD tooling. The role also involves managing relationships with compliance platforms and responding to customer security inquiries.