Senior Security Engineer

<div> <h4><span style="font-size: 10pt;">The Opportunity</span></h4> <p>We are seeking an experienced Security Engineer&nbsp;to join our team and help secure Otter’s cloud infrastructure and the systems behind our AI-powered meeting products. In this role, you will design and implement security controls, improve detection and response, reduce cloud risk through automation, and partner closely with DevOps and Engineering to ensure secure-by-default cloud deployments.<br>This is a highly hands-on role for someone who thrives in fast-moving environments, can balance risk reduction with shipping velocity, and enjoys building security capabilities that scale.</p> <p><span style="font-size: 10pt;"><strong>Your Impact</strong></span></p> <ul> <li data-stringify-indent="0" data-stringify-border="0"><strong data-stringify-type="bold">Design and implement secure cloud architectures</strong>&nbsp;and guardrails across our environments (network segmentation, encryption, key management, secure service patterns).</li> <li data-stringify-indent="0" data-stringify-border="0"><strong data-stringify-type="bold">Own IAM security</strong>: access controls, least-privilege policies, privileged access workflows, and recurring access reviews.</li> <li data-stringify-indent="0" data-stringify-border="0"><strong data-stringify-type="bold">Build and scale cloud security infrastructure</strong>&nbsp;(logging, monitoring, alerting, vulnerability management, and DLP controls where appropriate).</li> <li data-stringify-indent="0" data-stringify-border="0"><strong data-stringify-type="bold">Harden CI/CD and infrastructure-as-code</strong>&nbsp;with security automation (secrets detection, dependency scanning, IaC scanning, policy-as-code).</li> <li data-stringify-indent="0" data-stringify-border="0"><strong data-stringify-type="bold">Monitor cloud security signals</strong>&nbsp;and investigate security alerts; continuously improve detection quality and reduce noise.</li> <li data-stringify-indent="0" data-stringify-border="0"><strong data-stringify-type="bold">Lead incident response</strong>&nbsp;for cloud security events and help mature playbooks, forensics readiness, and response processes.</li> <li data-stringify-indent="0" data-stringify-border="0"><strong data-stringify-type="bold">Conduct cloud security assessments and threat modeling</strong>&nbsp;for new architectures and high-impact changes; partner with Engineering to drive remediation.</li> <li data-stringify-indent="0" data-stringify-border="0"><strong data-stringify-type="bold">Support compliance requirements</strong>&nbsp;and security controls aligned to enterprise needs (e.g., HIPAA, PCI-DSS, GDPR; and security frameworks such as NIST / ISO 27001).</li> <li data-stringify-indent="0" data-stringify-border="0"><strong>Build security tooling and automations in code</strong> to improve prevention, detection, response, and developer guardrails across cloud and application environments.</li> <li data-stringify-indent="0" data-stringify-border="0"><strong>Write and maintain scripts, services, and integrations</strong> that support security operations, including telemetry pipelines, policy enforcement, and remediation workflows.</li> <li data-stringify-indent="0" data-stringify-border="0"><strong>Partner with engineers</strong> by reviewing code, infrastructure-as-code, and deployment patterns to identify security risks early and drive secure implementation.</li> </ul> <h4><span style="font-size: 10pt;">We're looking for someone who</span></h4> <ul> <li data-stringify-indent="0" data-stringify-border="0">5+ years of experience&nbsp;in cloud security engineering or closely related security engineering roles.</li> <li data-stringify-indent="0" data-stringify-border="0">Strong knowledge of&nbsp;cloud security architectures, controls, and compliance requirements.</li> <li data-stringify-indent="0" data-stringify-border="0">Expertise securing&nbsp;public cloud platforms&nbsp;(e.g., AWS, Azure), including multi-cloud networking considerations and designing&nbsp;cloud-agnostic&nbsp;patterns where needed.</li> <li data-stringify-indent="0" data-stringify-border="0">Solid understanding of&nbsp;container security,&nbsp;network security, and cloud security services.</li> <li data-stringify-indent="0" data-stringify-border="0">Experience building and operating core security capabilities such as&nbsp;logging/monitoring,&nbsp;vulnerability management, and (bonus)&nbsp;DLP.</li> <li data-stringify-indent="0" data-stringify-border="0">Strong understanding of security frameworks such as&nbsp;NIST&nbsp;and&nbsp;ISO 27001.</li> <li data-stringify-indent="0" data-stringify-border="0">Excellent problem-solving and analytical skills, plus strong communication and cross-functional collaboration.</li> <li data-stringify-indent="0" data-stringify-border="0">Strong software engineering, coding, and scripting skills in languages such as Python, Go, or Bash, with the ability to build production-quality security systems, services, and automation—not just one-off scripts.</li> <li data-stringify-indent="0" data-stringify-border="0">Experience developing or reviewing infrastructure-as-code and application code, with the ability to identify security issues and implement practical fixes.</li> <li data-stringify-indent="0" data-stringify-border="0">Comfortable using APIs, SDKs, and automation frameworks to integrate security controls into developer workflows, CI/CD systems, and cloud environments.</li> <li data-stringify-indent="0" data-stringify-border="0">Bachelor’s degree in Computer Science, Cybersecurity, or related field</li> </ul> <p><strong style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">About Otter.ai&nbsp;</strong></p> </div> <div> <p><span style="font-size: 10pt;">We are in the business of shaping the future of work. Our mission is to make conversations more valuable.</span></p> <p><span style="font-size: 10pt;">With over 1B meetings transcribed, <a href="http://otter.ai/">Otter.ai</a> is the world’s leading tool for meeting transcription, summarization, and collaboration. Using artificial intelligence, Otter generates real-time automated meeting notes, summaries, and other insights from in-person and virtual meetings - turning meetings into accessible, collaborative, and actionable data that can be shared across teams and organizations. The company is backed by early investors in Google, DeepMind, Zoom, and Tesla.</span></p> <p><span style="font-size: 10pt;">Otter.ai is an equal opportunity employer. We proudly celebrate diversity and are committed to building an inclusive and accessible workplace.&nbsp; We provide reasonable accommodations for qualified applicants throughout the hiring process.&nbsp;</span></p> <div><span style="font-size: 10pt; font-family: arial, helvetica, sans-serif;"><strong>Accessibility &amp; Accommodations&nbsp;</strong></span></div> <div> <p><span style="font-size: 10pt;">Otter.ai is committed to providing reasonable accommodations for candidates with disabilities in our hiring process. &nbsp;If you need assistance or an accommodation during any stage of the recruitment process, please contact hr@otter.ai at least 3 business days before your interview.<em><br></em></span></p> </div> <p><span style="font-size: 8pt;">*Otter.ai does not accept unsolicited resumes from 3rd party recruitment agencies without a written agreement in place for permanent placements. Any resume or other candidate information submitted outside of established candidate submission guidelines (including through our website or via email to any Otter.ai employee) and without a written agreement otherwise will be deemed to be our sole property, and no fee will be paid should we hire the candidate.</span></p> <p><span style="font-size: 10pt;"><strong>Salary range</strong></span></p> <p><span style="font-size: 10pt;">Salary Range: $185,000 to $210,000 USD per year</span></p> <p><span style="font-size: 8pt;">This salary range represents the low and high end of the estimated salary range for this position. The actual base salary offered for the role is dependent based on several factors. Our base salary is just one component of our comprehensive total rewards package.<br><span style="color: rgb(255, 255, 255);">#LI-Hybrid</span><br></span></p> </div>