About the job

HQ is located in Atlanta, GA (candidates based in Atlanta area will have preference but also open to hybrid / US Remote)

Team: Operations

Reports to: COO

Type: Full‑time

Why AdPipe

Video is hard; we're making it easy. Fresh off a $12M Series A, AdPipe is further investing in our AI-native video platform trusted by some of the world's top brands to lower the cost of video, get to market faster with video, and increase the impact of every asset produced. We help marketing teams work smarter and empower large organizations to ship high‑impact video for growth and retention without having to learn the ins and outs of an NLE.

At the core of our platform sits:

• A high‑throughput ingestion pipeline that indexes large media libraries and performance data for search and AI automation.
• An in‑browser video editor that interfaces with both users and AI.

The Role

We're hiring a Security Engineer to own security, compliance, and IT operations at AdPipe. This is a hybrid role: part security strategist, part hands‑on IT operator. You'll be the person who keeps our SOC 2 posture sharp, guides prospects through security reviews, manages our device fleet and corporate networks, and builds the internal processes that let a fast‑moving startup ship confidently without cutting corners on trust. You'll partner closely with engineering leadership and touch everything from vendor risk assessments to SSO configuration to incident response planning.

What you'll do

• Compliance & audit operations: Own the SOC 2 audit lifecycle end‑to‑end—evidence collection, control monitoring, remediation tracking, and auditor coordination. Manage annual penetration testing engagements and drive findings to closure.
• Third‑party risk & prospect security reviews: Complete inbound security questionnaires and risk assessments for prospects and customers. Conduct vendor risk assessments, categorize vendors into risk tiers, monitor ongoing compliance, and review contracts for security obligations.
• Policy & governance: Author, maintain, and enforce company security policies. Conduct annual policy reviews, track employee acknowledgments, and ensure policies evolve alongside our technology and regulatory landscape.
• Identity & access management:Administer SSO, MFA, and role‑based access controls across the organization. Process access requests, conduct quarterly access reviews, manage privileged accounts, and ensure timely deprovisioning during offboarding.
• Employee onboarding & offboarding: Own the IT side of the employee lifecycle—provisioning devices and accounts on day one, collecting and wiping hardware on departure, and disabling access within one business day of termination.
• Device & network management: Manage the corporate device fleet including procurement, configuration, patching, encryption enforcement, and secure disposal. Administer company networks, VPN, and Wi‑Fi infrastructure.
• Core security operations: Own incident response, vulnerability management, security monitoring, asset tracking, business continuity planning, security awareness training, change management reviews, and secure development guidance across the organization.

Qualifications

• 3+ years in a security engineering, IT security, or GRC role with hands‑on operational experience.
• Working knowledge of SOC 2 (Type II), with direct experience managing audits or maintaining compliance programs.
• Comfort administering identity providers (Okta, Google Workspace, Azure AD, or similar), MDM platforms, and endpoint security tools.
• Experience completing and responding to third‑party security questionnaires and vendor risk assessments.
• Solid understanding of networking fundamentals, device management, and cloud security (AWS preferred).
• Familiarity with incident response frameworks, vulnerability management, and business continuity planning.
• Strong written communication; you can translate complex security requirements into clear policy language and customer‑facing responses.
• Self‑directed; comfortable operating as the primary security and IT resource in a growing startup.

Nice to have

• Experience with infrastructure‑as‑code, CI/CD security controls, or DevSecOps practices.
• Relevant certifications (CISSP, CISM, CompTIA Security+, AWS Security Specialty, or similar).
• Background in SaaS or media/video technology companies.
• Experience building security programs from the ground up at an early‑stage company.

Compensation & benefits

• Base Salary: $150,000-$170,000
• Medical, dental, vision, 401(k)
• Flexible PTO, Parental Leave, a strong team culture of working on something bigger than ourselves
• Location/visa: USA (not able to sponsor visa at this time) Atlanta, GA will receive preference

AdPipe Core Values

• Be ambitious
• Do what you say
• Feedback is fuel
• Lead with empathy

Our commitment

We're an equal‑opportunity employer and welcome teammates from all backgrounds.

Email sam@adpipe.com with resume to apply.