Bright Machines
Security Engineer
Burlingame, California · Senior
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card filing pattern in this occupation
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- The Global IT Director, to whom this role reports, sets security policy and strategy
- Because you'll work daily with IT, Platform Engineering, Software Development, and Delivery, strong written and verbal English communication is essential.
- Execute day-to-day information security operations across corporate IT, platform, and product environments, in partnership with the Global IT Director, who sets security policy and strategy.
Responsibilities
- You will own day-to-day maintenance of our existing ISO 27001:2022 certification and execution of the customer security requirements our commercial relationships depend on.
- Partner with Platform Engineering to build application security into the SDLC: threat modeling support, secure code review guidance, and operation of SAST/DAST/SCA tooling.
- Support security incident response: help maintain the IR plan, participate in investigations, and run periodic tabletop exercises.
- Support identity and access governance for corporate and platform systems (access reviews, certifications, MFA/SSO enforcement) with IT Engineering.
- Maintain information security policies, standards, and employee security awareness training (including phishing simulations), in line with direction from the Global IT Director.
Skills
- Conduct security risk assessments for new vendors, tools, and third-party integrations.
- Basic cloud security literacy (AWS, Azure, and/or GCP): IAM, network security groups, encryption, logging and monitoring.
Compensation
- Maintain our existing ISO 27001:2022 certification: manage evidence collection, internal audits, and corrective actions, and support annual surveillance and recertification audits.
Company info
- At Bright Machines, we're innovators and experts in our craft who have joined together to manufacture the AI and data center infrastructure at the edge.
- Working with us means you'll have the opportunity to make lasting, impactful changes for our company and our customers.
This listing is sourced directly from Bright Machines's careers page and normalized into a canonical job model.