RefolkCandidates
Open nowEngineeringEngineering

Security Engineer - Member of Technical Staff

Simile · San Francisco, California

Location
San Francisco, California, United States
Employment
Full time
Level
Staff
Posted
23 July

About this role

About the Company

Simile is The Simulation Company. We simulate human behavior to keep people at the center of the decisions that shape the world. With AI, anyone can create a product, a campaign, a policy, or a script - the bottleneck has moved upstream. The hard question is no longer whether you can create something, but what to create, for whom, and how to bring it to life. Those are fundamentally human decisions, and they shouldn't be left to chance or handed off to an algorithm. We're building the infrastructure to understand human behavior at scale and to represent humans in an increasingly agentic world. Our mission is to simulate all eight billion people on earth.

We launched five months ago. Since then we've grown revenue 5x, built a new foundation model for human behavior that has run tens of millions of simulations for F100 enterprises, trained a first-of-its-kind confidence model that predicts the accuracy of every simulation, and released the first product that lets organizations verifiably predict the future. The world's leading companies use Simile to make business-critical decisions - from consumer leaders like CVS Health and Wealthfront to professional services organizations like Deloitte and Gallup - strategizing product launches, entering new markets, and forecasting earnings calls.

We've raised over $200M at a $2B post-money valuation led by Greenoaks, with Index Ventures, Hanabi, A*, Bain Capital Ventures, and CVS Health Ventures. We've grown from a small home in Palo Alto to a global team of 50+, and we're building a team of the best researchers, engineers, designers, and operators in the world. The future is too important to be left to chance.

About the Team

The Security team is the guardian of our simulation’s integrity. We ensure that as we model human society, we do so with uncompromising privacy and world-class defenses. We operate at the intersection of application security, AI safety, and enterprise-grade privacy to protect our foundation models and our customers' most sensitive data.

We organize our work into three core pillars:

  • Application Security: Partnering with engineers to "shift left," conducting threat models and secure design reviews to catch vulnerabilities before they reach production.

  • Product and AI/ML Security: Defending our generative agents against emerging threats like prompt injection, data poisoning, and model extraction.

  • Infrastructure & Compliance: Hardening our multi-cloud footprint (AWS/GCP) and automating identity management (SAML/SCIM) to maintain SOC2 and HIPAA standards.

About the Role

We are looking for a Security Engineer who thrives on securing novel AI products. You will own the security roadmap, ensuring our platform is resilient, compliant, and stays ahead of an ever-evolving threat landscape.

Responsibilities

  • Customer Security & Trust: Partner with our largest enterprise customers to navigate the procurement process , leading technical discussions regarding security agreements, providing comprehensive posture overviews, and ensuring alignment on rigorous data handling requirements

  • Lead Secure Design: Conduct threat modeling and secure design reviews for new features, ensuring security is a core consideration from initial design through implementation.

  • Automate Defenses: Develop tooling and "paved paths" that allow our engineering and research teams to ship code safely without sacrificing velocity.

  • Own Vulnerability Management: Oversee our bug bounty program and internal vulnerability scanning, prioritizing fixes based on actual risk to our foundation models.

  • Secure AI/ML Pipelines: Build specific defenses against AI-novel risks, including protecting high-throughput inference systems and GPU-accelerated computing environments.

  • Champion GitOps Security: Manage security configurations via Terraform/Pulumi, ensuring "security-as-code" is the truth across all multi-region environments.

Requirements

Must Haves

  • Experience: 5+ years of experience in application or infrastructure security within a high-growth environment.

  • Security Polyglot: Deep expertise in securing AWS environments; experience with GCP or Azure is a major plus.

  • Offensive Mindset: Ability to think like an attacker to anticipate risks, paired with a collaborative spirit to help engineers remediate them.

  • Operational Mindset: Experience with modern observability and a "you build it, you run it" mentality toward security infrastructure.

  • Agentic Security Tooling: Experience integrating agentic AI workflows into the developer lifecycle to provide real-time security feedback, enabling engineers to be "secure-by-design" as code is written rather than after the fact.

Nice to Haves

  • AI/ML Security: Experience securing AI/ML workloads, specifically defending against prompt injection or protecting model weights.

  • Kubernetes Mastery: Strong K8s (EKS/GKE) experience, specifically around multi-tenant security and resource isolation.

  • Compliance Expertise: Proven track record of navigating SOC2, HIPAA, or similar regulatory frameworks in a cloud-native environment.

Compensation & Benefits

At Simile, we provide competitive compensation packages that include base salary, equity, and comprehensive benefits.

  • Salary Range: $200,000 - $400,000 USD

    • Note: Final offers are based on experience, specialized skills, interview performance, and relevant training.

  • Equity: Grants are available for eligible roles, subject to board approval.

  • Health & Wellness: Comprehensive medical, dental, and vision coverage.

  • Time Off: Flexible time off policies to support work-life balance.

  • Our Process

    We prioritize thoughtful conversations and clear examples of past work. Our hiring journey is designed to help both sides align on fit, working style, and expectations.

    Reapplication Policy: To ensure a fair and thorough evaluation for all applicants, Simile observes a 90-day waiting period before reconsidering candidates for the same role.

    Commitment to Diversity & Inclusion

    Equal Opportunity: Simile is an equal opportunity workplace. We welcome applicants of all backgrounds and identities, valuing an environment where everyone can contribute authentically.

    Accommodations: If you require support or reasonable accommodations during the application process due to a disability, please let us know. We are happy to assist.

    As published by Simile. Applications are handled on their site.

    Skills this posting mentions

    Machine LearningGoogle Cloud PlatformValuation

    About Simile

    Simile is the simulation company, built for leading enterprises. We support world class customers like Gallup, CVS, Wealthfront and Suntory to accelerate growth, shorten innovation cycles, and derisk decisions. Backed by Index, Hanabi, BCV and A* along with angels including Fei‑Fei Li, Andrej Karpathy, Adam D’Angelo, Guillermo Rauch, Scott Belsky, and others. Simile is the trusted partner for modernizing enterprise decision making.

    All 10 openings at Simile

    One click, then it is written

    Apply to Simile with a resume written for this role.

    Queue Security Engineer - Member of Technical Staff and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Simile’s form for you.

    1. 01Drop your resume

      A PDF or a LinkedIn URL. About a minute, once.

    2. 02I rank the openings

      Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

    3. 03Each one is written up

      Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

    • 25 sent a week, free
    • No card
    • Nothing sent until you say so

    More roles at Simile

    See all

    Similar roles elsewhere

    See more

    Put this to work

    Paste your career in once. Every application after that is written for you.

    Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.

    1. 01Drop your resume

      A PDF or a LinkedIn URL. About a minute, once.

    2. 02I rank the openings

      Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

    3. 03Each one is written up

      Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

    • New matches ranked and written before you are up.
    • Every bullet stays inside what your history supports. Nothing invented.
    • Queued, submitted, interviewing, offer: one screen, not a spreadsheet.

    500 free credits on sign-up. No card. Nothing is sent until you say so.

    Listed from the job board Simile publishes. Refolk is not the employer and does not handle their hiring. Applications go to Simile directly.