Security Engineer (Remote)
Etched · Remote
About this role
## About Etched Etched is building hardware for frontier intelligence. We co-design chips, racks, software, and manufacturing to deliver best-in-class throughput and latency across both prefill and decode workloads. Our first products are heavily focused on inference—backed by hundreds of millions from top-tier investors and staffed by leading engineers. ## Job Summary As a **Security Engineer (Remote)**, you’ll build and maintain a **secure yet friction-free** computing environment. You’ll protect the networks, systems, and applications that enable engineers to push the limits of AI hardware. You’ll design, implement, and operate monitoring, detection, and response infrastructure that safeguards Etched’s **intellectual property**, **high-performance compute clusters**, and **developer workflows** across **on-prem and cloud**. You’ll partner with infrastructure, IT, application, and external provider teams to create security that is **secure by design**, **resilient under pressure**, and **seamless for end users**. ## Key Responsibilities - Manage and harden security baselines across **on-prem, hybrid, and cloud** while maintaining speed and usability. - Integrate **telemetry, logging, tracing**, and management of structured/semi-structured/unstructured data for unified observability. - Lead **vulnerability management**, patching, and configuration assurance to reduce exposure. - Strengthen **identity, access, and network security** using **Okta, Google Workspace, and FreeIPA**. - Implement and maintain **zero-trust** architectures, including **SASE**, **CASB**, and **conditional access**. - Operate and enhance security operations tooling: **SIEM, SOAR, EDR/XDR**. - Develop and tune detection logic, automation, and playbooks (e.g., insider activity, lateral movement, anomalous behavior). - Investigate and respond to incidents: root-cause analysis, containment, remediation, and coordination with engineering/IT. - Build automation, scripts, **AI agents**, and integrations to streamline monitoring, alerting, and remediation. - Establish metrics, dashboards, and feedback mechanisms to measure detection coverage and response time. - Promote security awareness and ownership across engineering teams. ## Representative Projects - Build a centralized security telemetry pipeline aggregating logs/signals into a unified SIEM. - Create SOAR workflows to automate alert triage, data gathering, and initial containment. - Develop a secure end-user access framework using SDWAN, SASE, CASB, conditional access, EDR/XDR, and MDM/MAM. - Configure and monitor **IDS/IPS** and firewalls for network intrusion detection—especially on SDWAN and client VPN links. - Create incident response plans and playbooks for scenarios like lab breaches or compromised silicon testing machines. - Conduct vulnerability assessments and penetration testing, then coordinate remediation. ## You May Be a Good Fit If You Have - **5–7+ years** in security engineering, SOC operations, detection engineering, incident response, or a similar role. - Strong software engineering skills in **Python, Go, Bash** (C and Rust a major plus). - Proficiency with **SIEM/SOAR**, including building detections, dashboards, and automated workflows. - Deep understanding of **EDR/XDR**, endpoint security hardening, and telemetry across **macOS, Linux, Windows**, and servers. - Experience implementing **zero trust** (conditional access, SASE, CASB, identity-driven access control). - Familiarity with **I
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.