Security Engineer
Etched · San Jose
About this role
## About Etched Etched is building hardware for frontier intelligence. We co-design chips, racks, software, and manufacturing to deliver best-in-class throughput and latency across both prefill and decode workloads. Our first products are heavily focused on inference, backed by hundreds of millions from top-tier investors. ## Job Summary As a **Security Engineer**, you’ll protect the networks, systems, and applications that enable engineers to push the limits of AI hardware. You’ll design, implement, and operate monitoring, detection, and response infrastructure that safeguards Etched’s **intellectual property**, **high-performance compute clusters**, and **developer workflows** across **on-prem and cloud**. You’ll partner with infrastructure, IT, application, and external provider teams to build systems that are **secure by design**, **resilient under pressure**, and **seamless and easy to use**. This role combines hands-on technical depth with a focus on **scalability and automation**. ## Key Responsibilities - Manage and harden security baselines across **on-prem, hybrid, and cloud** systems while maintaining speed and usability. - Integrate telemetry, logging, tracing, and observability across structured, semi-structured, and unstructured data. - Lead **vulnerability management**, patching, and configuration assurance to reduce exposure and maintain consistent posture. - Strengthen **identity, access, and network security** using **Okta, Google Workspace, and FreeIPA**. - Implement and maintain **zero-trust** architectures, including **SASE**, **CASB**, and **conditional access** policies. - Operate and enhance security operations tooling: **SIEM, SOAR, and EDR/XDR**. - Develop and tune detection logic, automation, and playbooks for threats such as **insider activity**, **lateral movement**, and anomalous behavior. - Investigate and respond to security incidents (root-cause analysis, containment, remediation) in coordination with engineering and IT. - Build automation, scripts, AI agents, and integrations to streamline monitoring, alerting, and remediation. - Establish metrics, dashboards, and feedback mechanisms to measure detection coverage, response time, and security health. - Promote security awareness and ownership across engineering teams. ## Representative Projects - Build a centralized security telemetry pipeline aggregating logs/signals into a unified SIEM. - Design and develop **SOAR** workflows to automate alert triage, data gathering, and initial containment. - Create a secure end-user access framework using **SD-WAN, SASE, CASB, conditional access, EDR/XDR, and MDM/MAM**. - Configure and monitor **IDS/IPS** and firewalls for network security monitoring (especially SD-WAN and client VPN links). - Create incident response plans and playbooks for scenarios like lab breaches or compromised silicon testing machines. - Conduct vulnerability assessments and penetration testing, then coordinate remediation. ## You May Be a Good Fit If You Have - **5–7+ years** in security engineering, SOC operations, detection engineering, incident response, or a similar role. - Strong software engineering skills in **Python, Go, Bash** (and **C/Rust** is a major plus). - Proficiency with **SIEM/SOAR**, including building detections, dashboards, and automated workflows. - Deep understanding of **EDR/XDR**, endpoint security hardening, and telemetry across **macOS, Linux, Windows**, and servers. - Experience implementing **zero trust** (co
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.