
Insurance · 172 people
Sr. Security Engineer II
Posted 16 Oct
What’s this role about? Secure the internal AI environment by implementing design patterns, conducting threat modeling, and running adversarial testing on LLM integrations and agents. Manage the AI security program through risk assessments, compliance documentation for SOC 2 and ISO 42001, and incident response.
Skills required
Tap the ones you have
Want to get this job faster?
Apply with AI
No more application formsOur AI fills them in and submits them for you. You just pick the jobs.
Find hiring manager
Reach the person hiringEmail the person behind the job, not the inbox.
Company
About Hi Marley Hi Marley is the first intelligent conversational platform built for P&C insurance and powered by SMS. Designed by insurance professionals, Hi Marley enables lovable, convenient conversations across the entire ecosystem, saving money and time for carriers while building customer loyalty through delightful interactions. Hi Marley's industry-leading collaboration, coaching and analytics capabilities deliver crucial insights that streamline carrier operations while enabling a frictionless customer engagement experience . The solution is made for the enterprise; it’s fast to deploy, easy to use and seamlessly integrates with core insurance systems. Through its advanced conversational technology, Hi Marley reduces friction – empowering innovative carriers to reinvent the customer and employee experience.
Hi Marley
The intelligent communication platform for P&C insurance.

Responsibilities
- Strengthen the security of Hi Marley's corporate environment: identity and
- access (SSO, MFA, conditional access, and privileged access), SaaS
- configuration and integrations, and the AWS accounts that host our business
- and AI tools.
- Design and maintain secure reference patterns and preventive and detective
- guardrails as code (Terraform, service control policies, AWS Config,
- conditional access, and SaaS posture policies), so teams can adopt new tools
- quickly without reinventing controls.
- Run vulnerability and misconfiguration management across endpoints, SaaS
- applications, and cloud workloads, prioritizing exploitability and exposure,
- and tune detections from AWS, identity, and endpoint tooling to cut noise.
- Lead threat modeling and security design reviews for new tools, integrations,
- automations, and data flows before they go live, driving mitigations into the
- design phase.
- Partner with IT and AI-Operations (AI-Ops) teams on identity lifecycle,
- least-privilege access, secrets management, and workload isolation across our
- corporate environment.
- Max Courage - We encourage our team, our customers, and their customers to
- dream big, try new ideas, and maximize impact by measuring risk.
- Be Humble - We lead with appreciation and promote a culture of humility,
- compassion, and openness to learn from anyone, anywhere.
- Ubuntu ("I am because we are") - We believe true success is much bigger than
- any single individual or company. By aligning our individual aims behind a
- shared purpose, we can achieve our fullest potential, together.
- Life at Hi Marley is shaped by collaboration, learning, and genuine connection.
- We're proud to foster an environment where people can do their best work, feel
- supported, and grow alongside a team that celebrates both individuality and
- shared purpose.
- Core values-based leadership that guides our decision-making and daily
- interactions
- A culture of engagement, diversity, inclusion, and belonging: everyone's
- voice matters
- Flexible, hybrid work environment that values balance and trust
- Ample opportunities to learn, take on new challenges, and make an impact in a
- fast-growing organization
- Meaningful work that directly supports our mission to help people and
- organizations communicate with empathy and clarity
- Hi Marley is proud to be an equal employment opportunity employer. We celebrate
- diversity and do not discriminate based on gender, sexual orientation, gender
- identity, religion, race, veteran status, disability status, or any other
- characteristic protected by applicable law. We are committed to building an
- inclusive work environment representing a variety of backgrounds, perspectives,
- and skills, where all employees are encouraged to be their authentic selves.
- In addition to base pay, we offer a comprehensive total rewards package that
- Equity grants for all employees
- A 4% matching 401(k) program
- Medical, dental, vision, disability, and life insurance coverage for
- employees working 30+ hours per week
- Monthly wellness stipend
- Paid parental leave
- A flexible vacation policy - we all work hard and take time when we need it
- Max Courage – We encourage our team, our customers, and their customers to
- dream big, try new ideas, and maximize impact by measuring risk.
- Be Humble – We lead with appreciation and promote a culture of humility,
- compassion, and openness to learn from anyone, anywhere.
- Ubuntu (“I am because we are”) – We believe true success is much bigger than
- any single individual or company. By aligning our individual aims behind a
- shared purpose, we can achieve our fullest potential — together.
- Life at Hi Marley is shaped by collaboration, learning, and genuine connection.
- We’re proud to foster an environment where people can do their best work, feel
- supported, and grow alongside a team that celebrates both individuality and
- shared purpose.
- A fun, lively startup culture that embraces creativity and innovation
- Core values-based leadership that guides our decision-making and daily
- interactions
- A culture of engagement, diversity, inclusion, and belonging — everyone’s
- voice matters
- Flexible, hybrid work environment that values balance and trust
- Ample opportunities to learn, take on new challenges, and make an impact in a
- fast-growing organization
- Meaningful work that directly supports our mission to help people and
- organizations communicate with empathy and clarity
- Hi Marley is proud to be an equal employment opportunity employer. We celebrate
- diversity and do not discriminate based on gender, sexual orientation, gender
- identity, religion, race, veteran status, disability status, or any other
- characteristic protected by applicable law. We are committed to building an
- inclusive work environment representing a variety of backgrounds, perspectives,
- and skills, where all employees are encouraged to be their authentic selves.
Qualification
Required
- 5+ years in security engineering, cloud security, or infrastructure security,
- including leading threat modeling and design reviews, ideally at a SaaS
- company.
- Hands-on AWS and identity security experience: IAM, network design,
- encryption, logging, native security services, SSO, MFA, and conditional
- access.
- Experience building security controls and automation as code: Terraform or
- similar IaC, security tooling in CI/CD pipelines, and strong Python.
- Experience running vulnerability management and producing audit evidence for
- SOC 2, ISO 27001, or similar frameworks.
- Proven ability to lead threat modeling and security architecture reviews for
- cloud-native applications, SaaS integrations, and internal tooling.
- Ability to communicate technical risk clearly to engineers, product managers,
- and auditors.
- Interest in AI and how it changes the attack surface. You don't need to be an
- AI security specialist, but you should want to help us adopt AI securely and
- learn by doing.
Preferred
- Experience securing LLM-based systems, agentic frameworks, or MCP connectors,
- and an understanding of AI-specific attack surfaces such as prompt injection,
- tool-use exploitation, and data leakage.
- Familiarity with ISO/IEC 42001 or the NIST AI RMF.
- Experience with detection engineering, SIEM, or observability for cloud and
- SaaS environments.
- Working knowledge of OAuth 2.0, OIDC, and SAML, including delegated access
- and token scoping for integrations.
- Experience at a growth-stage B2B SaaS company in a regulated industry.
Benefits
- At Hi Marley, we are committed to fair and transparent pay practices. The annual
- base salary for this role is expected to fall within the range of
- [$121,000-$200,000], depending on experience, skills, qualifications, and
- location. Offers are determined based on these factors as well as internal peer
- equity. It's most common for new hires to start near the midpoint of the range,
- allowing room for growth as employees develop in their role.
- In addition to base pay, we offer a comprehensive total rewards package that
- employees working 30+ hours per week
- A flexible vacation policy - we all work hard and take time when we need it
Interested in this role?
Recommended jobs
- D

Senior Product Security Engineer
DigitalOcean·Boston
$140.8K – $176KRemoteFull-time2-5 years expSkills required
Threat modelingSecurity risk assessmentSoftware architecture - D

Staff Product Security Engineer, Secure Design (Kernel and Virtualization)
DigitalOcean·Boston
$140K – $175KRemoteFull-time5-10 years expSkills required
Kernel SecurityThreat ModelingVirtualization Security - D

Principal Engineer, AI/ML Security
DigitalOcean·Boston
$230.4K – $288KRemoteFull-time10+ years expSkills required
AI SecurityMachine LearningCybersecurity