SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Coram AI is hiring its first Lead Security Engineer to own security, IT, and compliance for a fast-growing AI company transforming video security and intelligent operations. The company uses computer vision and multimodal LLMs to power real-time alerts, clip sharing, and multi-site visibility for customers ranging from police departments and federal agencies to Fortune 500 companies, schools, and hospitals across the US, UK, and Canada.
In this role, you will own the entire compliance and security function end-to-end. Key responsibilities include:
- Establish and manage compliance programmes, starting with SOC 2 Type II and ISO 27001 certifications, including controls, evidence, policies, auditor coordination, and remediation.
- Lead the path to additional frameworks customers require, such as NDAA/TAA, HIPAA, CJIS, CMMC, ITAR, and FedRAMP, deciding which to pursue and which to address through documentation.
- Partner closely with sales on customer security reviews, questionnaires, and due-diligence calls; build a trust centre and reusable answers to accelerate deal closure.
- Own data flows, retention, and privacy controls for sensitive video and biometric data, including GDPR, Illinois BIPA, and state-by-state retention requirements.
- Automate and operationalize compliance: manage onboarding, offboarding, access reviews, identity platforms, SSO, MFA, device management, and endpoint protection.
- Oversee IT systems and vendors across US, UK, and India offices.
- Collaborate with engineering on security fixes and architecture changes; lead incident response and customer communication during security events.
- Build a prioritized security roadmap, report progress to leadership, and hire to scale the function.
You'll start hands-on and work directly with engineering leadership, with the opportunity to build out the security function and team as the company grows. This is a high-impact role at a well-funded, mission-driven company backed by top-tier VCs (Ansa Capital, Battery Ventures, Mosaic, 8VC, Up Partners) that has raised over $65M and was named to CB Insights AI 100.
QUALIFICATIONS:
- 8+ years in security, compliance, or IT, with demonstrated ownership of a security and compliance programme at a B2B startup or scale-up.
- Personally led a SOC 2 Type II audit, plus at least one additional framework (ISO 27001, HIPAA, CJIS, CMMC, ITAR, or FedRAMP).
- Experience selling into enterprise, government, law enforcement, defence, or healthcare customers; proven ability to work closely with sales on security reviews.
- Technical proficiency to work credibly with engineers: scripting (Python or Bash), cloud and infrastructure-as-code basics, identity platforms, and device management.
- Comfort with detailed execution (questionnaires, policies) while maintaining strategic perspective.
- Ability to communicate risk clearly to non-technical stakeholders and push back on sales or leadership when necessary.
- Experience leading or building a team is a plus but not required.
- Nice to have: biometric or video privacy experience, physical security or IoT hardware background, or certifications such as CISSP, CISM, CISA, or OSCP.
