Security Data Engineer

Description

The company is a public benefit corporation headquartered in San Francisco that builds AI systems meant to be reliable, interpretable and steerable, and safe for users and society. Its team is growing quickly and includes researchers, engineers, policy staff and business leads.

The DCSE team secures the sites where the company's AI models are trained and served, the hardware moving through those sites, and the people and vendors who handle it. Some capacity sits in data centers the company operates and some in sites that partners build and run.

This role owns the security data behind all of that: the component-level hardware inventory and chain of custody, the software at sites and on hosts that feeds it, and continuous control monitoring. The posture calculations here decide what each site is cleared to run.

You design the architecture, agree schemas and interfaces with the teams, operators and vendors that own each source, and build and operate the pipelines, stores and tools. The aim is security verified continuously from records, with tools and AI agents handling reviews. The team prefers simple, standard controls that can be checked over elaborate ones, and it uses AI models across its engineering work and expects you to do the same.

You work with the wider DCSE group, including the engineers on the security monitoring platform, the compute and data center operations teams, and data center operators, hardware vendors and logistics providers directly. The role is based in San Francisco with remote applicants in the US considered, and involves regular travel to data center sites, which are critical infrastructure.

Responsibilities

• Maintain the component-level record of hardware: what exists, where it is, and who has handled it. This covers the data model, pipelines that join inventory and custody events from many systems, full change history on every record, and tamper-evident storage.
• Build tools and AI agents for reconciliation, audit evidence exports and custody checks. Where a manual review keeps taking people's time, automate it.
• Build workflows and site and host software that record custody events as they happen, such as receipts, moves, data wipes and decommissions, and enforce who is allowed to record each one.
• Own pipelines that turn check results, assessment outcomes and findings into per-control and per-site measures over time, measured against the compliance frameworks the company and its partners are assessed against. Own the posture calculation that decides what a site may run.
• Add coverage checks, source reconciliation and alerts for silent or drifting feeds, so bad or missing records surface the same day. Own retention and access controls on these records.
• Agree schemas and interfaces with the engineers who run the security monitoring platform. Build the query surfaces and reports used by the team, site leads and leadership.

Requirements

• You have designed and run production data systems, including relational schemas, change data capture, batch or streaming pipelines and the services around them. You have kept them correct by measuring coverage, reconciling against sources, alerting on silence and designing for corrupted or lost records.
• You have integrated with systems you did not control, such as inventory tools, ticketing systems and vendor APIs, and built data models that outlast any single source.
• You have shipped software that runs outside a central service, such as host agents, site-local services or edge collectors, and kept it correct in the field. Alternatively, you have built metrics a team made decisions on and defended them when challenged.
• You have worked hands-on with data on physical assets or security controls, such as a hardware fleet, data center or supply chain inventory, asset custody, or the control and evidence data of a security or compliance program.
• You can read and review other people's code, and you build with AI coding agents using Git and code review.
• You can own a domain end to end: set the approach, design and build it with the teams and vendors it depends on, and run it as something people use every day.
• You write SQL and at least one general-purpose programming language well.
• You hold a Bachelor's degree or an equivalent combination of education, training and/or experience, in a field relevant to the role, shown through coursework, training or professional experience.
• Preferred: experience with asset management, supply chain or warehouse systems where serialized tracking and custody transfer are the core problem.
• Preferred: experience building continuous control monitoring or metrics for a security or compliance program, or producing evidence an assessor accepted, for example against NIST SP 800-53, ISO 27001 or SOC 2.
• Preferred: experience with risk or posture scoring that combines control results, findings and other evidence into a measure people make decisions on.
• Preferred: familiarity with data center hardware and its lifecycle from receipt to decommission, and with parties you did not control, such as colocation, cloud or GPU cloud operators, hardware manufacturers and logistics providers.
• Preferred: experience running software on many hosts or at remote sites with versioned rollout and a way to confirm each copy is still reporting.
• Preferred: experience building AI agents or automation that replaced recurring manual work.

Conditions

Annual salary range: $320,000 - $405,000 USD.

Location: San Francisco, with remote applicants in the US considered.

Regular travel to data center sites.

Hybrid policy: staff are expected in one of the offices at least 25% of the time, and some roles may require more.

Visa sponsorship is available but not for every role or candidate. If an offer is made, the company will make every reasonable effort to obtain a visa and uses an immigration lawyer to help.

The company encourages applications from people who do not meet every qualification.

Benefits

• Competitive compensation and benefits.
• Optional equity donation matching.
• Generous vacation and parental leave.
• Flexible working hours.
• An office space for collaborating with colleagues.