HeyGen
Security Engineer
San Francisco, Palo Alto, Toronto
Sponsorship not specifiedDetected 108 days ago
PythonAWSCloud PlatformsCybersecurityNetwork SecurityDetection EngineeringComplianceCommunication
Stay score
odds of building a lasting career here
36Risky
Cap-exempt (no lottery)0
Sponsors this role74
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
2 transfer filings in the last year, covering 2 workers. Median labor-condition decision: 8 days. An employer that already files transfers is one that can take over an existing H-1B.
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- This is a high-impact, high-autonomy role for an engineer who thinks in threat models and ships code.
Responsibilities
- Product & Infrastructure Security: Partner with engineering teams as an embedded security expert - writing code, reviewing architectures, and building secure application features and infrastructure components from the ground up.
- Fraud Detection & Remediation: Design and implement automated fraud detection systems to mitigate platform abuse, credential stuffing, and payment fraud.
- Partner with product and engineering to build real-time monitoring and rapid-response remediation workflows.
- Cloud & Vulnerability Management: Own the strategy and execution for hardening our AWS/Python infrastructure. Build and run a robust vulnerability management program, including network security, cloud configuration, and remediation workflows.
- AI Security: Serve as HeyGen's point person for AI and agentic system security. As we scale our agentic coding and AI agent products, you will ensure these rollouts are designed and deployed with strong security controls.
- As a Security Engineer at HeyGen, you will own the security posture of one of the fastest-growing AI companies in the world.
Requirements
- You are not starting from zero.
- Excellent communication skills: able to translate threat models for engineers, compliance requirements for auditors, and security architecture for enterprise CISOs.
- Comfortable with ambiguity and rapid scale
- you prioritize ruthlessly and know when to build vs. buy.
- Why HeyGen:
- Massive Scale, Unique Problems: We are protecting user identity at one of the fastest growth rates in SaaS history. The security engineering challenges here are genuinely novel.
- Speed with Guardrails: Our security philosophy is not about saying "no." It is about building guardrails that let the engineering team ship fast without introducing unacceptable risk.
- Mature Tooling from Day One: We already run Drata for GRC, Infisical for secrets management, and a private bug bounty program via Bugcrowd. You are not starting from zero.
- Autonomy and Ownership: You will have the visibility and resources to shape HeyGen's entire security roadmap. Small team, big mandate.
Nice to have
- Strong software engineering background with hands-on Python and AWS experience
- you write code, not just policies.
- Demonstrated experience securing cloud infrastructure and applications - vulnerability management, network security, IAM, and secrets management.
- Familiarity with GRC frameworks and compliance programs (SOC 2, ISO 27001, or equivalent).
Skills
- Experience with modern security tooling is a plus (Drata, Infisical, Bugcrowd, or equivalents).
- able to translate threat models for engineers, compliance requirements for auditors, and security architecture for enterprise CISOs.
Compensation
- GRC & Compliance: Oversee our SOC 2 compliance operations (currently managed via Drata) and annual audit cycles. Evaluate and roadmap future certifications, including ISO 27001, as the business scales.
Company info
- About HeyGen At HeyGen, our mission is to make visual storytelling accessible to all.
- Why HeyGen: - Massive Scale, Unique Problems: We are protecting user identity at one of the fastest growth rates in SaaS history.
This listing is sourced directly from HeyGen's careers page and normalized into a canonical job model.