Security & Trust Engineer (SF-based)

About AlexAlex is the AI recruiter for hiring great people.Alex interviews, screens, and schedules every candidate – over voice, video, and text – so talent teams hire more great people, faster, without adding TA headcount. The recruiter stays in control: every shortlist is approved by a human, and every relationship and offer is owned by the customer's team.We're past 1M+ interviews, integrate with 33+ ATS platforms, and 96% of candidates prefer interviewing with Alex. We're revenue-generating, well-funded, backed by premier investors, and are focused on enterprise customers: selling to VPs of Talent Acquisition, CHROs, and CFOs at large employers who are rethinking how hiring gets done at scale.What we're looking forWe're hiring our first dedicated Security & Trust Engineer to own information security, compliance, and AI governance at Alex.AI in hiring is one of the most scrutinized categories in enterprise software right now. That means two things: we need a security and compliance program that genuinely holds up, and we need someone who can stand in front of an enterprise CISO and make them confident in it. You'll own both — the controls, audits, and processes behind the scenes, and the customer conversations where a security team decides whether they trust us.You do not need to be a compliance expert today, but you need to be motivated to own this space. You need to be smart, technical, extremely organized, and genuinely interested in AI risk and security. We'll expect and support you to get deep fast.You'll report to our CTO and work closely with Engineering, Sales, and Operations.Your day to day will include:Own the customer security review, end to end: Be the single owner of infosec questionnaires, SIGs, CAIQs, vendor risk assessments, DPAs, and security addenda. Turn them around fast, accurately, and without pulling engineers off roadmap. Where deals stall on security, you unstick them.Automate the process, don't just staff it: Build the answer library, evidence repository, and tooling — including AI tooling — that takes questionnaire turnaround from weeks to days. The measure of success is that volume goes up while manual effort goes down.Become our expert on AI risk and regulation: Own our point of view on the EU AI Act, NYC LL144, GDPR, state AI and biometric laws, bias auditing, and emerging global rules on automated employment decision tools. Track what's changing, translate it into what we actually do, and keep Sales, Product, and leadership ahead of it.Represent Alex externally: Lead security, information security, and AI governance calls with enterprise prospects and customers. Build the trust center, security whitepapers, and AI governance documentation that secures Alex as enterprise-grade, leading expert in this space.Run compliance and audit: Own SOC 2 and drive the roadmap for what comes next (ISO 27001, ISO 42001, regional requirements). Manage auditors, penetration tests, and compliance platform tooling. Keep certifications current without fire drills.Make the controls real: Partner with Engineering to ensure our systems, processes, and technical controls genuinely back up what we tell customers — access management, vendor and subprocessor review, vulnerability triage and remediation, incident response, cloud and CI/CD security posture. Build the risk register and run the program against it.Shift left with Product and Engineering: Get involved early on new features and model changes so security, privacy, and AI-governance questions are answered at design time rather than discovered in a customer review.This role is based in office 5 days a week in San Francisco and reports to our CTO.Why joinYou own the function: First security and trust hire. You define the program, the posture, and the story — not inherit someone else's.The most interesting regulatory frontier in software: AI in hiring is where AI regulation is landing first and hardest. You'll be building a playbook that doesn't exist yet.Direct line to revenue: Security review is a live bottleneck in our enterprise GTM motion. Fixing it is visible, measurable, and immediately valuable.Room to grow into it: We're hiring for trajectory, not credentials. If you're technical, organized, and hungry to go deep on AI risk, this role will take you further than a information security specialist seat at a larger company.Exposure: Work directly with our CTO, CEO, Sales leadership, and enterprise customers' security teams.Impact: Help a product that changes how people get hired and gives every candidate a real interview instead of a resume screen, responsibly.Upside: Competitive compensation, including equity.Benefits: Medical, dental, and vision insuranceFSA, DCFSA, HSA optionsFlexible paid time off (PTO)401(k) planFully paid parental leave programCommuter benefitsIn office lunchDog-friendly officeWhat am I waiting for?If you've gotten this far and our culture resonates with you, we want you to apply. Your first conversation will be with Alex, our AI recruiter.Alex is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic.