Security Data Engineer

Overview

Own the component-level hardware inventory, chain-of-custody data, and continuous control monitoring that determine what each data center site is cleared to run, building the data systems, pipelines, tools, and AI agents that run on this data.

What you'll do

• Own the component-level record of hardware: its data model, pipelines joining inventory and custody events from many source systems, change history on every record, and the tamper-evident stores behind it.
• Build the tools and AI agents the team runs on this data, including reconciliation, audit evidence exports, and custody checks.
• Build the workflows and site and host software that capture custody events as they happen (a receipt, a move, a data wipe, a decommission) and enforce who is authorized to record them.
• Own the pipelines that turn check outcomes, assessment results and findings into per-control and per-site measures over time, against compliance frameworks, and the posture calculation that decides what a site is cleared to run.
• Build coverage checks, reconciliation against sources and alerts on a silent or drifting feed; own retention and access controls on the records.
• Agree schemas and interfaces with the engineers who run the security monitoring platform, and build the query surfaces and reports used by the team, site leads and leadership.

What you'll need

• Have designed and run production data systems (relational schemas, change data capture, batch or streaming pipelines and the services around them) and kept them correct: coverage measured, records reconciled against the source, alerts on silence, and a design that expects records to get corrupted or lost.
• Have integrated with systems you did not control (inventory tools, ticketing systems, vendor APIs) and built data models that outlive any one source.
• Have shipped software that runs outside a central service (host agents, site-local services, edge collectors) and kept it correct in the field, or built metrics a team made decisions on and defended them when challenged.
• Have worked hands-on with data about physical assets or security controls: a hardware fleet, data center or supply chain inventory, asset custody, or the control and evidence data of a security or compliance program.
• Read and review other people's code, and build with AI coding agents using Git and code review.
• Own a domain end to end: set the approach, design and build it with the teams and vendors whose systems it depends on, and run it as something people use every day.
• Write SQL and at least one general-purpose programming language well.
• Bachelor's degree or an equivalent combination of education, training, and/or experience.
• A field relevant to the role as demonstrated through coursework, training, or professional experience.

Nice to have

• Experience with asset management, supply chain or warehouse systems where serialized tracking and custody transfer are the core problem.
• Experience building continuous control monitoring or metrics for a security or compliance program, or producing evidence an assessor accepted, for example against NIST SP 800-53, ISO 27001 or SOC 2.
• Experience with risk or posture scoring that combines control results, findings and other evidence into a measure people make decisions on.
• Familiarity with data center hardware and its lifecycle from receipt to decommission, and with sites and parties you did not control: colocation, cloud or GPU cloud operators, hardware manufacturers, logistics providers.
• Have run software on many hosts or at remote sites with versioned rollout and a way to know each copy is still reporting.
• Have built AI agents or automation that replaced recurring manual work.

Details

• Based in San Francisco; remote applicants in the US considered.
• Involves regular travel to data center sites, which are critical infrastructure.
• Location-based hybrid policy: expected to be in an office at least 25% of the time, with some roles requiring more.
• Annual salary: $320,000 — $405,000 USD.
• Visa sponsorship available for some roles and candidates.