Cloud Security & Compliance Engineer at Mobi.AI in Somerville, MA

About the Role:

As a Cloud Security & Compliance Engineer at Mobi, you’ll partner with a dynamic, forward-thinking team to build the resilient foundations that power our cutting-edge web experiences and AI-driven solutions. You’ll play a key role as the Security Engineering SME and Systems Builder, shaping the technologies that protect our travel-planning and logistics systems, which are used by some of the world’s leading brands.

This role blends technical engineering with the meticulous follow-through needed for compliance and documentation. You’ll be a representative for our customers and a creative partner for our engineers, focusing on audit-readiness as much as secure code. It’s an engaging, high-impact role where you move the business forward by finding "the secure way" to help our team ship and scale.

Key Responsibilities:

• Develop, test, and maintain scalable security guardrails to ensure a consistent, secure-by-default posture across our AWS and GCP environments.
• Navigate the human side of security by acting as a collaborative partner to our engineering teams; you will identify missing standards, negotiate solutions, and proactively suggest "the secure way" to build features rather than acting as a gatekeeper.
• Partner with our customers' security teams to align our architecture with their specific security patterns and represent Mobi’s robust security posture during technical deep-dives and reviews.
• Translate high-level security patterns and compliance frameworks (SOC 2 and GDPR) into high-quality, hardened infrastructure code and automated evidence collection.
• Review system designs to troubleshoot vulnerabilities, debug misconfigurations, and resolve architectural security gaps before they reach production.
• Own the security lifecycle—from initial threat modeling and customer alignment through to automated testing, shipping, and audit-ready reporting.
• Implement best practices for code quality, secret management, and maintainable security patterns across the entire engineering organization.
• Stay current with cloud-native security trends, multi-cloud vulnerabilities, and emerging AI-driven security technologies to proactively protect our AI-powered solutions.

Qualifications:

• Bachelor’s degree in Computer Science, Engineering, or a related field—or equivalent practical experience in technical security.
• Strong hands-on experience securing AWS and GCP infrastructure (e.g., API Gateway, Identity, Networking, Encryption, and Logging).
• Deep understanding of technical controls for SOC 2 and GDPR.
• Deep understanding of backend APIs, and RESTful services from a Zero Trust and data protection perspective.
• Proven ability to design and implement security frameworks in ambiguous or rapidly evolving environments, building scalable processes and guardrails where none previously existed.
• Strong problem-solving skills and the ability to work cross-functionally to align security goals with developer velocity.
• Comfortable reading and navigating modern codebases (e.g., TypeScript/JavaScript or Python) to conduct security reviews and understand application logic.
• Recent experience working on AI Applications, with an understanding of privacy concerns and security risks specific to LLMs.
• Excellent interpersonal and communication skills; able to lead high-stakes technical deep-dives with enterprise partners and negotiate security standards across teams using a collaborative, "solution-first" approach.  

Bonus:

• Experience using Infrastructure as Code to build and manage secure environments (e.g., Terraform or CloudFormation/CDK).
• Experience using AI Tools (Claude Code, GitHub Copilot, etc.) to automate security policy generation and workflow audits.

Pay Transparency: