Security & Compliance Engineer

About The Role

PromptQL is seeking a dedicated and knowledgeable Security and Compliance Engineer to join our team. In this role, you will be responsible for ensuring that our organization is in compliance with all relevant regulations and standards and that our systems are secure from potential threats. The successful candidate will have a strong understanding of security architectures, compliance standards, and risk management, and be able to work effectively with various teams across the organization to ensure optimal security and compliance.

Key Responsibilities

Risk Assessment and Management:

• Conduct comprehensive risk assessments and audits
• Identify vulnerabilities and ensure that appropriate security controls are in place

Security Policy And Procedures

• Develop, implement, and maintain company security policies, procedures, and standards
• Provide security training and awareness programs to staff to ensure compliance with security policies
• Develop and implement policies for cloud infrastructure security

Compliance Management

• Ensure compliance with relevant industry standards, regulations, and laws such as GDPR, HIPAA, and ISO 27001
• Stay up-to-date with the latest regulatory changes and advise the company on compliance-related matters

Incident Response

• Participate in incident response planning and activities
• Investigate and analyze security breaches and other cyber security incidents

Vendor Management

• Evaluate the security and compliance of third-party vendors
• Work with vendors to resolve any security and compliance issues
• Setup systems to make sure that software dependencies are tracked and scanned for vulnerabilities and license compliance

Pentests and Audits

• Conduct internal pentests and audits
• Advise teams on fixes and remediations

Role Requirements

• Minimum of 2 years of experience in software development
• Minimum of 2 years of experience in information security, compliance, or related field
• Proven experience in developing and implementing security policies and procedures
• Experience with security frameworks and standards (e.g., NIST, ISO 27001)
• Certifications in security and compliance such as CISSP, CISM, or CISA are preferred
• Strong knowledge of information security concepts, risk assessment methodologies, and compliance standards
• Familiarity with various security technologies such as firewalls, intrusion detection systems, and encryption technologies
• Familiarity with major Cloud providers - AWS, GCP, Azure
• Excellent verbal and written communication skills
• Strong problem-solving and analytical skills
• Previous experience handling ISO/SOC2 audits for the organization
• Strong interest in working in a high growth, fast-paced and dynamic startup environment

Good to Have

• Experience with Go-lang and/or React/Typescript
• Experience working with relational databases, in particular Postgres
• In-depth knowledge and experience with GraphQL
• Experience with observability tools like Prometheus, Grafana etc.
• Experience with compliance management tools
• Experience with tools for vulnerability scanning, dependency tracking

Location

• SF Bay Area: hybrid in-office 3 days per week
• Other select locations in the US: remote

Compensation

• $185,000 - $205,000 base salary + bonus
• Equity

About PromptQL

We’re helping the world’s most innovative enterprises build AI-native applications with 100% reliability on their enterprise data with PromptQL. PromptQL is the AI platform that delivers human level reliability for natural language based analysis and automation on your data & systems. When accuracy, transparency, and repeatability matter, PromptQL makes AI trustworthy, scalable, and real.

We're on a mission to bring the full value of AI to the enterprise. Our team is passionate about the power of AI to transform lives and businesses. We're curious, driven, and relentlessly customer-obsessed, working together to redefine what’s possible in enterprise AI. Join us—and help build the future of reliable AI.

Benefits & Perks

• Medical, dental, and vision insurance to keep you healthy and thriving
• Employee assistance programs for support when you need it
• Retirement fund contribution matching to help you invest in your future
• Donation matching to amplify your charitable impact
• Paid time off to support your well-being
• Monthly company-wide self-care day to recharge
• Stock options so you can share in our success
• Paid parental leave to support growing families
• Commuter benefits to help you save on your journey to the office
• Employee referral program to reward you for connecting us with great talent

We are committed to equal employment opportunity and do not discriminate based on race, religion, national origin, gender, sexual orientation, age, veteran status, disability, or any other status protected by law.

Applicants with disabilities who wish to request reasonable accommodations may contact us at [email protected].

While our official company name is Hasura, we do business as PromptQL.