Information Security Engineer at Hark

Job description

About Hark Hark is an artificial intelligence company building advanced, personalized intelligence. One that is proactive, multimodal, and capable of interacting with the world through speech, text, vision, and persistent memory. We're pairing that intelligence with next-generation hardware to create a universal interface between humans and machines. While today's AI largely operates through chat boxes and decade-old devices, Hark is focused on what comes next: agentic systems that interact naturally with people and the real world. To get there, we're developing multimodal models and next-generation AI hardware together, designed from the ground up as a single, unified interface for a new era of intelligent systems. About the Role We're hiring a Member of Technical Staff (Information Security Engineer) to secure the infrastructure and systems Hark runs on. You'll harden our AWS environments, own identity and access across the company, build detection and response, and lead incident response when things go wrong. We run model training, agent sandboxes, and hardware manufacturing pipelines, so the environment is broader and more interesting than a typical SaaS stack. This role is hands-on; you'll be building and operating, not managing or auditing. Responsibilities Harden cloud infrastructure across multiple AWS accounts (IAM, EKS, VPC and network access paths, KMS) and review IaC for misconfigurations. Own identity and access: SSO, least-privilege IAM, just-in-time access, secrets management, and access reviews. Build and maintain detection and alerting pipelines; lead triage, containment, and post-incident review. Secure the corporate environment: endpoint management, SaaS security posture, and zero-trust network access. Evaluate third-party vendors and integrations for security and privacy risk. Build the technical controls and evidence behind our compliance programs (SOC 2, GDPR) as automation, not spreadsheets. Requirements 4–8 years of hands-on security engineering experience in cloud and infrastructure security. Deep fluency in AWS security (IAM, Organizations/SCPs, CloudTrail, EKS), network hardening, and cloud posture tooling like Wiz (or equivalent). Experience with detection engineering and incident response using tools like GuardDuty and CrowdStrike (or equivalent); you've triaged real alerts and contained real incidents. Ability to read and review infrastructure-as-code (Pulumi, Terraform, or similar) for security issues. Comfort writing code and automation (Python, Go, or similar) to eliminate manual security work. Experience administering identity and endpoint platforms like Google Workspace as IdP, Kandji, and CrowdStrike (or equivalent IdP, MDM, and EDR tools). Bonus Qualifications Experience at a cloud security company (Wiz, Orca, Datadog, Snyk) or a security-forward startup (Stripe, Figma, Ramp, Netflix). Familiarity with zero-trust networking and secrets tooling (Tailscale, Cloudflare, HashiCorp Vault). Experience securing ML infrastructure, GPU clusters, or hardware/manufacturing supply chains. Hands-on experience building out a SOC 2 program at an early-stage company. Compensation The US base salary range for this full-time position is between $150,000 - $300,000 annually.

Requirements

Must-haves

This role is hands-on; you'll be building and operating, not managing or auditing.
Harden cloud infrastructure across multiple AWS accounts (IAM, EKS, VPC and network access paths, KMS) and review IaC for misconfigurations.
Own identity and access: SSO, least-privilege IAM, just-in-time access, secrets management, and access reviews.
Build and maintain detection and alerting pipelines; lead triage, containment, and post-incident review.
Secure the corporate environment: endpoint management, SaaS security posture, and zero-trust network access.
Evaluate third-party vendors and integrations for security and privacy risk.
Build the technical controls and evidence behind our compliance programs (SOC 2, GDPR) as automation, not spreadsheets.
4–8 years of hands-on security engineering experience in cloud and infrastructure security.
Deep fluency in AWS security (IAM, Organizations/SCPs, CloudTrail, EKS), network hardening, and cloud posture tooling like Wiz (or equivalent).
Experience with detection engineering and incident response using tools like GuardDuty and CrowdStrike (or equivalent); you've triaged real alerts and contained real incidents.
Ability to read and review infrastructure-as-code (Pulumi, Terraform, or similar) for security issues.
Comfort writing code and automation (Python, Go, or similar) to eliminate manual security work.
Experience administering identity and endpoint platforms like Google Workspace as IdP, Kandji, and CrowdStrike (or equivalent IdP, MDM, and EDR tools).
Experience at a cloud security company (Wiz, Orca, Datadog, Snyk) or a security-forward startup (Stripe, Figma, Ramp, Netflix).
Familiarity with zero-trust networking and secrets tooling (Tailscale, Cloudflare, HashiCorp Vault).
Experience securing ML infrastructure, GPU clusters, or hardware/manufacturing supply chains.
Hands-on experience building out a SOC 2 program at an early-stage company.

Nice-to-haves

Bonus Qualifications

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsgopythonfigmaml

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Vision