Security Engineer

Ciao is a small team of engineers. We build bespoke software and AI that connects to our customers’ ERP, CRM, inboxes and spreadsheets. As a Security Engineer, you own how we use that access and keep it safe. You’ll work from our San Francisco office.

What you’ll do

• Own SOC 2 Type II at Ciao. Keep our controls monitored in Vanta, keep evidence current and fix what fails.
• Design how we use the access a client grants, and scope it to the job.
• Make sure every client can switch off our access at any time, and test that it works.
• Review what our agents can do in client systems. Agents prepare the work, and the client’s team approves what goes out.
• Secure each integration, like a distributor’s ERP or a field services company’s shared inbox: credentials, permissions and logging.
• Answer security reviews, like a manufacturer’s questionnaire before we connect to their ERP, and join the calls that follow.
• Own incident response. Keep the plan current, test it with the team and lead when something goes wrong.

What we’re looking for

• You’ve owned security at a small company, across compliance, identity and application security.
• You’ve run a SOC 2 audit hands-on, in Vanta or a similar tool.
• You know identity and access well: SSO, MFA, least privilege and how service accounts go wrong.
• You read code, and you’ve done threat models for systems that touch other companies’ data.
• You’ve answered enough security questionnaires to know which answers need evidence.
• You explain risk plainly, to an engineer or to a client’s operations manager.
• You build controls engineers will use, not ones they work around.

Nice to have

• You’ve secured LLM agents: prompt injection, scoped tool permissions and audit trails.
• You’ve kept a promise like “we don’t use client data to train AI models” true in code and with vendors.

How we hire

• An intro call with Paul Sheridan, our founder and CEO.
• A working session where you build something real with us, like the access design for a sample integration.
• Meet the team.
• An offer.

Ciao is an equal opportunity employer.

Apply for this role →