Law firms trust us with their clients' most sensitive documents. You will make sure that trust is deserved: the infrastructure, controls and evidence behind our SOC 2 Type II and ISO 27001 certifications, and a platform that keeps every customer's data in the jurisdiction they chose.

What you will do

• Run our Kubernetes and cloud infrastructure as code (Terraform), across regions in Switzerland, the EU and mainland China.
• Own identity, secrets, key management and encryption at rest and in transit, including customer-managed keys.
• Build detection and response: logging pipelines, alerting, incident runbooks and tabletop exercises.
• Automate compliance evidence for SOC 2 and ISO 27001 audits and answer security questionnaires from global law firms.
• Lead threat modelling with engineers, including LLM-specific risks such as prompt injection and data leakage.

What you bring

• 5+ years in security engineering, SRE or platform engineering for a SaaS product handling sensitive data.
• Hands-on Kubernetes, Terraform and at least one major cloud; strong Linux and networking fundamentals.
• Practical experience with SOC 2, ISO 27001 or similar audits, and with GDPR or Swiss FADP data-protection requirements.
• Calm judgement in incidents and clear written English; Mandarin and knowledge of China's PIPL are a plus for the Shenzhen team.

Nice to have

• Certifications such as OSCP, CISSP or CKS; experience securing GPU inference clusters; confidential computing.

How we hire

A 10-minute AI interview in English (you are told up front that you are speaking with an AI), a conversation with the team you would join, and a short paid practical task that mirrors real work. We aim to decide within three weeks.