← All roles

Security Engineer

HeyGen· Engineering
Apply on company site
Hybrid (San Francisco/Palo Alto/Toronto)Posted 3mo ago

About the role

Security Engineer at HeyGen responsible for owning the security posture across product, infrastructure, and GRC programs, partnering with engineering to ship secure features, harden cloud infrastructure, and drive compliance and trust initiatives.

Responsibilities

  • Product & Infrastructure Security: Partner with engineering teams as an embedded security expert — writing code, reviewing architectures, and building secure application features and infrastructure components from the ground up.
  • Fraud Detection & Remediation: Design and implement automated fraud detection systems to mitigate platform abuse, credential stuffing, and payment fraud. Partner with product and engineering to build real-time monitoring and rapid-response remediation workflows.
  • Cloud & Vulnerability Management: Own the strategy and execution for hardening our AWS/Python infrastructure. Build and run a robust vulnerability management program, including network security, cloud configuration, and remediation workflows.
  • AI Security: Serve as HeyGen's point person for AI and agentic system security. Ensure security controls for scaling agentic coding and AI agent products.
  • GRC & Compliance: Oversee SOC 2 compliance operations and annual audit cycles. Evaluate and roadmap future certifications, including ISO 27001.
  • Trust & Safety Oversight: Provide high-level oversight for platform abuse and content moderation, and act as escalation point for IT security incidents.

Qualifications

  • Strong software engineering background with hands-on Python and AWS experience; you write code, not just policies.
  • Demonstrated experience securing cloud infrastructure and applications — vulnerability management, network security, IAM, and secrets management.
  • Familiarity with GRC frameworks and compliance programs (SOC 2, ISO 27001, or equivalent).
  • Excellent communication skills: able to translate threat models for engineers, compliance requirements for auditors, and security architecture for enterprise CISOs.
  • Comfortable with ambiguity and rapid scale; you prioritize ruthlessly and know when to build vs. buy.
  • Experience with modern security tooling is a plus (Drata, Infisical, Bugcrowd, or equivalents).

Skills

Required:PythonAWSCloud securityGRC / Compliance
Last updated Jul 8, 2026. Interested? Apply on the company site.
HeyGen logo

About HeyGen

Free AI Video Generator: Create Stunning Videos with AI

Create AI videos from your ideas using HeyGen. Input text, image, or audio to create complete videos with narration, captions, visuals, and animations.

AI video generatorAI avatarstext-to-videoimage-to-videovoice cloninglip-syncvideo translationlocalization
Company profileWebsite

More open roles at HeyGen