Information Security Engineer
Hark
$150,000 - $300,000 / year
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
About Hark
Hark is an artificial intelligence company building advanced, personalized intelligence. One that is proactive, multimodal, and capable of interacting with the world through speech, text, vision, and persistent memory.
We're pairing that intelligence with next-generation hardware to create a universal interface between humans and machines. While today's AI largely operates through chat boxes and decade-old devices, Hark is focused on what comes next: agentic systems that interact naturally with people and the real world.
To get there, we're developing multimodal models and next-generation AI hardware together, designed from the ground up as a single, unified interface for a new era of intelligent systems.
About the Role
We're hiring a Member of Technical Staff (Information Security Engineer) to secure the infrastructure and systems Hark runs on. You'll harden our AWS environments, own identity and access across the company, build detection and response, and lead incident response when things go wrong. We run model training, agent sandboxes, and hardware manufacturing pipelines, so the environment is broader and more interesting than a typical SaaS stack.
This role is hands-on; you'll be building and operating, not managing or auditing.
Responsibilities
- Harden cloud infrastructure across multiple AWS accounts (IAM, EKS, VPC and network access paths, KMS) and review IaC for misconfigurations.
- Own identity and access: SSO, least-privilege IAM, just-in-time access, secrets management, and access reviews.
- Build and maintain detection and alerting pipelines; lead triage, containment, and post-incident review.
- Secure the corporate environment: endpoint management, SaaS security posture, and zero-trust network access.
- Evaluate third-party vendors and integrations for security and privacy risk.
- Build the technical controls and evidence behind our compliance programs (SOC 2, GDPR) as automation, not spreadsheets.
Requirements
- 4–8 years of hands-on security engineering experience in cloud and infrastructure security.
- Deep fluency in AWS security (IAM, Organizations/SCPs, CloudTrail, EKS), network hardening, and cloud posture tooling like Wiz (or equivalent).
- Experience with detection engineering and incident response using tools like GuardDuty and CrowdStrike (or equivalent); you've triaged real alerts and contained real incidents.
- Ability to read and review infrastructure-as-code (Pulumi, Terraform, or similar) for security issues.
- Comfort writing code and automation (Python, Go, or similar) to eliminate manual security work.
- Experience administering identity and endpoint platforms like Google Workspace as IdP, Kandji, and CrowdStrike (or equivalent IdP, MDM, and EDR tools).
Bonus Qualifications
- Experience at a cloud security company (Wiz, Orca, Datadog, Snyk) or a security-forward startup (Stripe, Figma, Ramp, Netflix).
- Familiarity with zero-trust networking and secrets tooling (Tailscale, Cloudflare, HashiCorp Vault).
- Experience securing ML infrastructure, GPU clusters, or hardware/manufacturing supply chains.
- Hands-on experience building out a SOC 2 program at an early-stage company.
Compensation
The US base salary range for this full-time position is between $150,000 - $300,000 annually.
About this role
Hark is building advanced AI systems paired with next-generation hardware, and they need a hands-on security engineer to protect the infrastructure that makes it work. This role goes beyond typical SaaS security—you'll be hardening AWS environments that run model training, agent sandboxes, and hardware manufacturing pipelines, which means the attack surface and operational complexity are genuinely broader than what you'd encounter at most companies.
You'll own multiple security domains: cloud infrastructure hardening (IAM, EKS, VPC, KMS), identity and access management across the company, detection and incident response, corporate endpoint security, and vendor risk assessment. The work is operational and technical—building automation to replace manual processes, reviewing infrastructure-as-code for misconfigurations, triaging real alerts, and leading incident response. You'll also translate security controls into the compliance evidence Hark needs for SOC 2 and GDPR, built as actual systems rather than documentation theater.
This is a fit if you have 4–8 years of hands-on cloud and infrastructure security experience, deep AWS fluency, real incident response and detection engineering work under your belt, and the ability to write code to automate security tasks. Experience at security-forward companies, familiarity with zero-trust networking, or background securing ML infrastructure and hardware supply chains would strengthen your candidacy. The role is full-time, in-office in San Jose, with a base salary range of $150,000–$300,000.
This role's local market on JobMinglr
Pay for this role
$150,000 to $300,000 per year
That is the employer's posted range, and where you land in it is usually decided in one conversation. Before that conversation, run the numbers: analyze an offer for this role.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.