Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Lead an AI-first engineering rebuild, establishing the security and compliance foundation from scratch for a company with over 100M audience. Ensure regulated products across financial services, consumer goods, and media are shippable without compromising speed.

Responsibilities

• Own the security architecture and technical compliance posture across Step, Feastables, and the media organization.
• Build a unified control framework, mapping each control to relevant regulations (PCI DSS, COPPA, GDPR/CCPA, SOC 2).
• Automate evidence collection and control monitoring to ensure continuous compliance.
• Set security standards for engineers across cloud infrastructure, applications, and data systems.
• Lead threat modeling and security reviews for high-risk products, including payment systems and minors' data.
• Manage the vulnerability management program and drive remediation efforts.
• Develop and own incident response, including detection, playbooks, escalation, post-incident review, and breach-notification readiness.
• Act as technical lead for PCI DSS and SOC 2 audits, representing the company to auditors, regulators, and partners.
• Translate regulatory requirements into actionable engineering tasks and advise leaders on risk tradeoffs.
• Define secure-by-default patterns and paved paths to streamline compliance for most teams.

Requirements

• Utilize AI daily and integrate it into security work for automation and evidence pipelines.
• Possess approximately 15 years of combined security engineering and compliance experience.
• Demonstrate proven ownership of PCI DSS and SOC 2 in production, from control design through successful audit.
• Exhibit strong cloud security (AWS/GCP), application security, threat modeling, and incident response skills.
• Ability to read and reason about code.
• Clearly communicate risk and explain tradeoffs to the business.
• Prioritize the security of minors' data and customer money.
• Influence decisions through evidence rather than title.
• Possess working knowledge of privacy and minor-protection regulations (COPPA, GDPR, CCPA) and their mapping to technical controls.

Skills

• AI usage in security
• Security engineering
• Compliance engineering
• PCI DSS
• SOC 2
• Cloud security (AWS/GCP)
• Application security
• Threat modeling
• Incident response
• Code analysis
• Privacy regulation (COPPA, GDPR, CCPA)
• Fintech or payments experience (money movement, KYC)
• Security automation
• Infrastructure-as-code (Terraform, policy-as-code)
• CISSP certification
• CCSP certification
• OSCP certification
• Standing up a security or compliance function from an early stage

Location

• Bay Area (San Francisco / Peninsula)
• NYC
• Hybrid

Work Type

• Full-time
• Hybrid

Experience Level

• Principal-level IC
• Around 15 years of combined security engineering and compliance experience

Education Level

• Relevant certifications (CISSP, CCSP, OSCP)

Salary/Compensations

• Competitive Salary
• Highly competitive equity package

Benefits

• Generous Medical (Blue Cross Blue Shield)
• Dental
• Vision
• Company-paid Life Insurance
• Company contributions to employee Health Savings Accounts (HSA)
• 401k Plan with Safe Harbor company-matching
• Flexible vacation policy
• Paid company holidays
• Company-provided technology package
• Relocation assistance where applicable, including travel and company-provided housing for the first 90 days

About the Company

• Beast Industries is a multifaceted media and entertainment company founded by Jimmy Donaldson (MrBeast).
• The company is renowned for revolutionizing digital content creation and has a diverse portfolio beyond YouTube.
• Its mission is to entertain, inspire, and create significant social impact.
• Beast Industries operates across digital media, philanthropy, consumer products, and innovative business initiatives.
• The company believes in the transformative power of digital media to entertain, educate, and effect positive change.
• Commitment to innovation, creativity, and philanthropy drives the company to explore new frontiers, create unforgettable experiences, and build an inspiring legacy.