Senior SecOps Engineer

About CUBE AI CUBE AI is an Agentic Crime Prevention Platform, built at the intersection of agentic AI, cybersecurity, and fraud prevention. We serve the institutions on the front line of an exploding wave of AI-powered crime: banks, fintechs, and the platforms criminals cannot operate without. Our mission is ambitious: make the world a safer place. How we do it is the part we're most excited about, and the part we're happy to walk you through in a conversation rather than on the open internet. Why this is the seat to take This is a rare seat on a rocket ship. CUBE AI is early, exceptionally ambitious, and backed by some of the world's leading investors. Our founders have built and scaled startups to unicorn valuations and exits, and have run mega teams at mega companies. We are building the company that puts the institutions the modern economy runs on back on offense against AI-powered crime. The closest analogy is joining Palantir in its early days: a hard mission, a category we're defining rather than entering, and a small group of exceptional people compounding fast. If you want a comfortable role, this isn't it. If you want the defining chapter of your career, your best work alongside people who make you sharper, keep reading. The role Security is a gate here, not a garnish. We hold sensitive data and the trust of the institutions we protect, which makes our own security posture part of the product we sell. You will own security engineering end to end: the threat modeling and design reviews that decide what ships, the hardening of our cloud and identity estate, the detection layer that tells us when something is wrong, and the audit and questionnaire work that gates revenue. You are accountable for one outcome above all others: at CUBE AI, the secure path is the default path, for every engineer and every deployment. What you'll do Own the security gate before production. Run threat modeling and secure design reviews, and be the call on what ships.Own secure code review, CI/CD, and supply-chain security, and build paved-road tooling so the secure path is the easiest one for every engineer.Harden our GCP and GKE estate through IAM least-privilege reviews, network policy, egress control, and secrets management.Own identity platform security across Auth0, Google Workspace, and GitHub org permissions, including audit-log coverage, export, and retention.Establish and own the SIEM end to end: log pipeline, detection rules, and alert tuning. Run continuous scanning across infrastructure, containers, endpoints, and APIs.Own remediation tracking, patch SLAs, and the risk acceptance process. Scope and coordinate penetration tests, and drive every finding through to remediation.Turn our security posture into a commercial asset. Support SOC 2 and ISO 27001 audits, own evidence collection, and own the bank and fintech security questionnaires and DDQs that gate deals rather than sit in the back office.Define data handling, retention, and secure delivery controls for what we ship to financial institutions through Apex, and run vendor and third-party security reviews.Own security policies, standards, and the risk register, and build a security engineering mindset across the company through awareness and anti-phishing training, phishing simulations, and a security champions program.Own end-user security and access: 1Password, MFA enforcement, access management, and the access side of onboarding and offboarding. What we're looking for The bar (non-negotiable, every role): Extreme drive and passion for the work and the mission.Extreme ability to learn fast and operate with confidence in uncertainty.Extreme IQ and EQ. You raise the level of every room, and you lose an argument gracefully the moment someone's right. For this role specifically: 6+ years in security engineering, cloud security, or SecOps, with real time spent as the owner rather than one pair of hands among many.Deep, hands-on GCP and Kubernetes security: IAM, network policy, workload identity, secrets, egress, and the failure modes of each.You have built the paved road before. Secure CI/CD, supply-chain controls, and tooling that engineers adopt because it is easier than the alternative, not because a policy told them to.A track record of standing up or running SIEM and detection engineering, including the unglamorous half: tuning until an alert means something.Real experience carrying SOC 2 or ISO 27001, and the composure to sit in front of a bank's security reviewers. You can handle a third-line auditor and a CISO's questionnaire in the same week.You write well. Policies, standards, and questionnaire answers are engineering deliverables here, not paperwork.Bonus: financial services, fintech, or another regulated environment where passing security review is a condition of revenue. How we work and who thrives here Our core locations are Lithuania, London, and New York, and we consider remote-first candidates who can travel as needed for their role. We write more than we meet and move at warp speed. We're an AI-first company: every person here is amplified by a layer of AI agents, and we scale capability, not headcount. We don't buy services, we buy results. We're drivers, not passengers, so we hire people who go and do it without waiting for permission. We move fast, and we use judgment where it counts: we hold sensitive data and the trust of the institutions we protect, and we never cut corners there. Our culture runs on five virtues: A pedantic bar for quality. Work that is thorough, complete, and on time. We trust each other to deliver, fully.Radical ownership. See it, own it, fix it. Never defer a problem or an opportunity. You will never be reprimanded for taking initiative.Relentless energy and audacity. Building something exceptional demands enormous energy. We move forward with maximum drive.Automate everything. We scale the capability of our people, not the headcount. We always hunt the 10x multiplier, working alongside AI agents rather than piling on process.Have fun. We work with people we genuinely enjoy. It gets us through the hard stretches and keeps politics out. What's in it for you Uncapped growth. In a company moving this fast, scope finds the people who can carry it. Ownership and title are earned in months, not years.Real self-realization. This is a place to become the most capable version of yourself, next to people operating at the top of their game.A direct line to senior product and engineering leaders, and a real say in where the product goes.You share in the outcome. When the company wins big, you win big. What we offer Join a rocket ship. Let's discuss compensation and the rest of the details on our call. CUBE AI is an equal-opportunity employer. We welcome applicants of every background and will support any accommodations you need during the hiring process