turbopuffer is seeking a security and compliance expert to take our posture to the next level.

what you’ll do

• implement security-related features within the turbopuffer codebase and infrastructure

• handle security operations, including threat detection and response, vulnerability and incident management, etc.

• own and enhance our existing SOC 2 and HIPAA programs

• communicate directly with our customers’ security teams to build trust

• implement additional standards (e.g. ISO 27k) based on customer demand

• grow the security team over time

must-haves

• you’re a proficient programmer in a security-critical context

• you're a strong communicator and can explain complex ideas clearly

• your passion for infosec is contagious

nice to have

• you've lead security and/or compliance in a cloud-native environment

• you’re intimately familiar with secure practises in:

  • rust and typescript

  • k8s (GKE, EKS, AKS)

• you’ve made interesting contributions to the security community (e.g. exploits, research, open source, speaking)

values we live by

• overstep > understep

• correctness > simplicity > performance

• show > tell