About Plaud Inc.
Plaud is building the real-world AI interface for professionals to amplify intelligence, elevate productivity and performance, loved by over 2,500,000 users worldwide since 2023. With a mission to amplify human intelligence, Plaud captures, structures, and compounds the intelligence generated in conversations — so humans can think better, decide faster, and execute with clarity.
Plaud Inc. is a Delaware-incorporated, San Francisco-based company pushing the boundary of human–AI intelligence through a hardware–software combination. With full ISO 27001, ISO 27701, SOC 2, GDPR, EN18031, and HIPAA compliances, Plaud is committed to the highest standards of data security and privacy protection. To learn more about Plaud, please visit https://www.plaud.ai and follow along on Instagram, X, Facebook, LinkedIn, and YouTube.
Why You Should Join Us
Plaud is building the next generation intelligence infrastructure and interfaces to capture, extract, and utilize intelligence from what people say, hear, see, and think.
Plaud is a bootstrapped, skyrocketing, profitable company with a $300M revenue run rate achieved in just three years.
Define the next-gen paradigm for human-AI interaction.
Gain exposure to cutting-edge AI for Pro tools and play a direct role in our global expansion.
Work with passionate teammates who value innovation, collaboration, and customer success.
Grow your career in a culture that champions continuous learning and fast career development.
Market-competitive compensation, global exposure, and a vibrant, creativity-fueled work atmosphere.
About the Role
We are looking for a Senior Security Engineer to own our Security Operations, Detection, and Response foundation. This is a builder’s role—you will not be inheriting a mature program or an existing runbook. Instead, you will architect our cyber defense capability from the ground up, author our core detection logic, implement Detection-as-Code (DaC), and establish the incident response playbooks that will protect our infrastructure and ensure our SOC 2 Type II audit readiness.
If you are passionate about building robust cyber defense capabilities, automating routine triage and responses, and leading cross-functional incident response to consistently meet strict SLAs, this is the role for you.
What you will do
• Cyber Defense Capability & Telemetry Integration: Architect, deploy, and manage our core security stack (including but not limited to SIEM, EDR, and NTA) from zero. Establish reliable ingestion pipelines for telemetry spanning cloud environments (AWS/GCP), SaaS applications, and endpoint layers.
• Detection Engineering: Author, deploy, and continuously tune detection rules mapped to the MITRE ATT&CK framework. Focus heavily on maintaining high-fidelity coverage while aggressively reducing false positives and implementing Detection-as-Code practices.
• Incident Response & SOAR: Own the end-to-end IR lifecycle. Act as Incident Commander for critical P1/P2 events, gradually develop automated playbooks across core incident categories, and drive operational execution to consistently meet standard SLAs for Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
• AI-Driven SecOps: Embed LLMs directly into the daily security workflow. Utilize AI tools to summarize complex security alerts, generate initial detection rule logic and implement Detection-as-Code, and automate SOAR playbook drafting.
• SOC 2 Type II Operational Evidence: Produce and maintain the continuous evidence package required for our upcoming SOC 2 Type II audit. Own the CC7 (Monitoring & Detection) domain, including log retention standards, alert records, and monthly SecOps performance reporting to leadership.
Skills, qualifications and experience we look for
• Experience: 3+ years of hands-on security engineering experience with demonstrable depth in security operations (SIEM, IR, SOAR, detection engineering, threat hunting).
• Builder Mentality: Proven ability to build security infrastructure from zero, including tool selection, baseline configuration, and policy definition without relying on legacy runbooks.
• Technical Depth: Strong working knowledge of the MITRE ATT&CK framework, custom log source integration, and incident severity matrix mapping.
• SLA & IR Proficiency: Extensive experience managing incident response lifecycles and tuning workflows to meet strict MTTD/MTTR SLAs.
• Compliance Familiarity: Working knowledge of SOC 2 Type II control requirements—specifically CC7 (Monitoring & Detection)—and the operational evidence standards expected by a third-party auditor.
• AI Fluency: Routinely uses LLMs (ChatGPT, Claude, etc.) as part of daily security workflows for alert summarization, rule generation, or automation. Note: You will be asked to demo your AI usage from the last two weeks during the interview process.
What we offer
Meaningful Ownership An Employee Stock Ownership Plan (ESOP) that gives a real stake in Plaud’s long-term success.
High-Impact Environment Work in a fast-moving, product-driven environment where your ideas directly shape the future of AI productivity.
Cutting-Edge AI Tools for Productivity Access to best-in-class AI tools, including Gemini, Claude Code, and other frontier AI systems to maximize engineering and execution efficiency.
Best-in-Class Equipment Choice of top-spec laptops, high-performance workstation setups, and cutting-edge Plaud devices for all new hires.
Team & Culture Annual company offsites, team events, and a culture that values craftsmanship, ownership, and velocity.
Medical & Insurance Coverage Comprehensive benefits to protect our employees' financial security, physical health, and longterm growth. Medical insurance and WICA coverage for all full-time employees.
Disclaimer: Plaud is and will continue to be an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristics.