Cyber Security Engineer

Department: Operations

Location: Pittsburgh

Employment Type: FullTime

About Gray Swan

Gray Swan is on a mission to empower the world to use AI safely and securely. We evaluate AI models for the leading frontier labs along with building real-time threat detection and adaptive adversarial red teaming agents for teams deploying AI.

We're a team of approximately 50 people, well-funded, growing quickly. Our work directly influences how the world deploys AI agents and systems at scale..

Learn more about how we work.

The Role

We’re looking for a Cyber Security Engineer to help secure both Gray Swan’s internal infrastructure and the systems we use to deliver security products to customers. You’ll be responsible for building and improving our security posture across cloud environments, endpoints, applications, and AI infrastructure while partnering closely with Engineering, Product, and Operations teams. This role combines hands-on technical work, security operations, and strategic security planning in a fast-moving AI company.

What You’ll Do

• Design, implement, and maintain security controls across cloud infrastructure, endpoints, applications, and internal systems.

• Monitor, investigate, and respond to security events, incidents, and potential threats in collaboration with internal teams and external security providers.

• Manage and optimize security technologies including EDR/XDR, SIEM, vulnerability management, and identity management platforms.

• Conduct security assessments, vulnerability reviews, penetration testing coordination, and risk analyses for internal systems and third-party applications.

• Partner with Engineering and Product teams to integrate security best practices into software development, deployment, and AI workflows.

• Help develop security policies, incident response procedures, and operational processes that scale with company growth.

Who You Are

• 5+ years of experience in cybersecurity, security engineering, security operations, or a related field.

• Strong understanding of networking, operating systems, cloud security, identity management, and common attack techniques.

• Experience deploying and managing security tools such as EDR/XDR platforms, SIEMs, vulnerability scanners, and security monitoring solutions.

• Proficiency with scripting and automation using Python, Ansible, Terraform, or similar languages.

• Familiarity with security frameworks such as SOC, NIST CSF, CIS Controls, or ISO 27001.

• Actively participated in or led a compliance effort for a security framework.

• Excellent communication skills and the ability to explain security concepts to both technical and non-technical stakeholders.

Bonus Points If You Have

• Experience securing AI, machine learning, or cloud-native environments.

• Experience working with SentinelOne, CrowdStrike, Fortinet firewalls, or similar technologies.

• Familiarity with compliance platforms such as Drata, Vanta, or SecureFrame.

• Experience managing relationships with managed SOC providers or participating in security operations programs.

• Hands-on experience with AWS, Azure, or GCP security architectures.

• Security certifications such as CISSP, GSEC, CEH, GIAC, or CCSP.

• Experience operating in highly regulated industries including government, defense, healthcare, or financial services.

If you don’t have 100% of these, you should still seriously consider applying. We care more about what you can do than your credentials.

You’ll Thrive Here If You

• Enjoy taking ownership and solving ambiguous problems without waiting for detailed instructions.

• Like balancing hands-on technical work with strategic thinking and long-term planning.

• Are naturally curious and stay up to date on emerging security threats, technologies, and AI-related risks.

• Communicate clearly and work effectively across engineering, product, and business teams.

• Care deeply about building trustworthy, secure technology that protects customers.

• You want to help shape the security culture and practices of a fast-growing company.

What We Offer

We offer a competitive compensation package designed to reward impact and incentivize growth. Our compensation philosophy is informed by our current valuation and recent industry data.

Compensation: $95,000 - $145,000 plus performance-based bonus and meaningful equity package

Benefits

• 401k with up to 4% matching

• 28 days annual leave (vacation + holidays)

• Health, dental, and vision coverage

• Catered lunches (Pittsburgh office)

• Flexible work arrangements

• Visa sponsorship available for exceptional candidates

Interview Process

🔎 Application review. We read everything; we’ll respond within 10 days.

✏️ Online technical screen (15 min). Complete a simple, job-relevant exercise.

🗣 Intro call (30 min). We learn about you; you learn about us.

🧑‍💻 Technical interview (90 min). Practical security and problem-solving exercises relevant to the role.

🗣 Experience & culture interview (60 min). Conversational exploration of your experience, working style, and values.

😇 Reference checks. We’ll reach out to 3–5 references that you provide.

📃 Offer. If it’s mutual, we move fast.

How to Apply

Submit your resume, link to your portfolio, and answer the questions on the application.