What are the responsibilities and job description for the Security Engineer position at Meshy?
About MeshyHeadquartered in Silicon Valley, Meshy is the leading 3D generative AI company on a mission to Unleash 3D Creativity by transforming the content creation pipeline. Meshy makes it effortless for both professional artists and hobbyists to create unique 3D assets—turning text and images into stunning 3D models in just minutes. What once took weeks and cost $1,000 now takes just 2 minutes and $1.Our world-class team of top experts in computer graphics, AI, and art includes alumni from MIT, Stanford, and Berkeley, as well as veterans from Nvidia and Microsoft. Our talent spans the globe, with team members distributed across North America, Asia, and Oceania, fostering a diverse and innovative multi-regional culture focused on solving global 3D challenges. Meshy is trusted by top developers, backed by premiere venture capital firms like Sequoia and GGV, and has successfully raised $52 Million in funding.Meshy is the market leader, recognized as the No.1 in popularity among 3D AI tools (according to 2024 A16Z Games) and No.1 in website traffic (according to SimilarWeb, with 3 Million monthly visits). The platform boasts over 5 Million users and has generated 40 Million models.Founder and CEO Yuanming (Ethan) Hu earned his Ph.D. in graphics and AI from MIT, where he developed the acclaimed Taichi GPU programming language (27K stars on GitHub, used by 300 institutes). His work is highly influential, including an honorable mention for the SIGGRAPH 2022 Outstanding Doctoral Dissertation Award and over 2,700 research citations.About the RoleWe are looking for a Security Engineer to help build and maintain a strong security posture across our product, cloud infrastructure, and internal IT environment. In this role, you will monitor and analyze security incidents, manage vulnerabilities, enforce security best practices across the organization, and collaborate with both internal stakeholders and our outsourced security partners.This is a high-impact, hands-on position that combines technical depth with cross-functional influence.What You'll DoSecurity Monitoring & Incident ResponseMonitor alerts and notifications from cloud services, security tools, and our SOC/MSSP partners.Triage and analyze potential security incidents, determine severity and scope, and coordinate response and remediation.Maintain and improve incident response processes, runbooks, and documentation.Provide clear communication and reporting during and after incidents.Vulnerability ManagementTrack and manage vulnerabilities across cloud infrastructure, applications, endpoints, and internal SaaS systems.Work with engineering and IT teams to prioritize and remediate findings from scanners, CNAPP/CSPM tools, pentests, and bug reports.Identify trends and systemic risks, and drive long-term improvements.Cloud & Infrastructure SecurityHelp maintain secure configurations for our cloud environment (AWS/Azure/GCP).Operate and tune cloud and enterprise security platforms such as CSPM, CNAPP, CIEM, EDR/MDM, and SIEM tools.Contribute to secure patterns for IAM, network architecture, secrets management, and CI/CD pipelines.Partner with engineering on secure design and architecture decisions.Organizational Security PracticesEstablish and enforce security standards, guidelines, and best practices across product, engineering, and IT.Drive adoption of secure development practices and cloud security guardrails.Support security awareness initiatives and promote a strong security culture company-wide.Compliance & External Security CoordinationSupport security compliance programs such as SOC 2, ISO 27001, and customer due diligence needs.Maintain policies, controls, and evidence to satisfy audit and regulatory requirements.Coordinate with external security vendors, penetration testers, and GRC partners; ensure findings are processed and resolved.What You Bring5 years of experience in security engineering, cloud security, or security operations.Strong understanding of cloud security principles, especially IAM, networking, and workload/container security.Experience with modern enterprise security tools (CSPM, CNAPP, CIEM, SIEM, EDR/MDM).Ability to analyze security alerts and vulnerabilities and coordinate effective remediation.Familiarity with secure SDLC practices and CI/CD integration.Experience working with compliance frameworks (SOC 2, ISO 27001, or similar).Strong communication skills and the ability to influence across engineering, product, and IT.Our ValuesBrain: We value intelligence and the pursuit of knowledge. Our team is composed of some of the brightest minds in the industry.Heart: We care deeply about our work, our users, and each other. Empathy and passion drive us forward.Gut: We trust our instincts and are not afraid to take bold risks. Innovation requires courage.Taste: We have a keen eye for quality and aesthetics. Our products are not just functional but also beautiful.Why Join Meshy?Competitive salary, equity, and benefits package.Opportunity to work with a talented and passionate team at the forefront of AI and 3D technology.Flexible work environment, with options for remote and on-site work.Opportunities for fast professional growth and development.An inclusive culture that values creativity, innovation, and collaboration.Unlimited, flexible time off.BenefitsStock options available for core team members.401(k) plan for employees.Comprehensive health, dental, and vision insurance.The latest and best office equipment.
Salary : $1,000