Security Engineer

SableSan Francisco, CaliforniaOn-siteFull-timeMid level, 2–5 yearsListed 50 minutes ago

Apply now

About this role

ABOUT SABLE

Sable built Aidan, the first AI employee who leads customer calls using realtime voice, vision, and browser use. Aidan runs a live, two-way conversation inside a real product environment, clicking through the product like a human, watching the user's screen, and adapting the journey on the fly. Every conversation feeds a self-improving context graph we call the Brain, so Aidan gets smarter with each call.

THE ROLE

You own security at Sable. You'll set and enforce the standards that let enterprises trust us with their customers and data: data handling, access control, endpoint security, and the compliance program.

WHAT YOU'LL DO

- Own security across every surface: browser environments, credentials, secrets, customer and internal data
- Own data-handling and access-control standards, and implement enterprise-level best practices across every surface
- Own our compliance program: maintain ISO 27001 & 42001 and SOC 2 Type II controls and evidence
- Threat-model new surfaces (realtime voice, vision, browser use, and the Brain) and establish preventative systems for engineering before they ship
- Manage and be up to date on CVEs and resolves with your own contributions and collaboration within engineering
- Build detection, logging, and incident response systems

WHO YOU ARE

- Experience in security engineering for cloud infrastructure: container orchestration (Kubernetes), IAM, network isolation, and secrets management
- You write the fix yourself, not just the finding, and you match controls to real risk so a small team keeps moving fast
- Comfortable leading conversations with customers' security teams and holding the room
- Excited to be the first dedicated owner of security, and to build the guardrails that let a small team operate like an enterprise
- Bonus: securing multi-tenant or sandboxed browser/computer use systems; running compliance audits; experience with LLM agent risks such as prompt injection and data exfiltration