SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 200,000 - 400,000 / annual
Simile is an AI company that simulates human behavior at scale to help organizations make better decisions. The company has raised over $200M at a $2B valuation and works with leading enterprises including CVS Health, Wealthfront, Deloitte, and Gallup.
The Security team operates at the intersection of application security, AI safety, and enterprise privacy. You will own the security roadmap for a novel AI platform, ensuring it remains resilient, compliant, and ahead of emerging threats.
Key responsibilities include:
- Partner with enterprise customers through procurement and technical security discussions, providing comprehensive security posture overviews and ensuring alignment on data handling requirements.
- Conduct threat modeling and secure design reviews for new features, embedding security from initial design through implementation.
- Develop tooling and automation ("paved paths") that enable engineering and research teams to ship code safely without sacrificing velocity.
- Oversee vulnerability management, including bug bounty programs and internal scanning, prioritizing fixes based on actual risk to foundation models.
- Build defenses against AI-novel risks, including protecting high-throughput inference systems and GPU-accelerated computing environments.
- Manage security configurations via infrastructure-as-code (Terraform/Pulumi) across multi-region, multi-cloud environments (AWS/GCP).
Required qualifications:
- 5+ years of application or infrastructure security experience in high-growth environments.
- Deep expertise securing AWS; GCP or Azure experience is a plus.
- Offensive security mindset paired with collaborative approach to helping engineers remediate vulnerabilities.
- Modern observability experience and "you build it, you run it" mentality toward security infrastructure.
- Experience integrating agentic AI workflows into developer lifecycle for real-time security feedback.
Nice-to-have skills include AI/ML security (prompt injection defense, model weight protection), Kubernetes mastery (EKS/GKE multi-tenancy), and compliance expertise (SOC2, HIPAA).
