Founding Security Engineer

Reducto helps AI teams ingest real world enterprise data with state of the art accuracy.

The vast majority of enterprise data — from financial statements to health records — is locked in unstructured file formats like PDFs and spreadsheets. We train vision models to read those documents the way a human would, and make it possible to build products, train models, and automate processes at scale.

We've grown incredibly quickly, from zero to mid 7 figure ARR in 1 year, and now work with hundreds of companies ranging from leading AI teams (Harvey, Vanta, Scale), through to enterprise (FAANG, top 3 trading firm).

We're also backed by world class investors like Benchmark and First Round Capital, and are looking for a Founding Security Engineer to own our security posture and compliance programs as we scale to serve the world's most security-conscious enterprises.

• Philosophy: You are your own worst critic. You have a high bar for quality and don't rest until the job is done right—no settling for 90%. We want someone who ships fast, with high agency, and who doesn't just voice problems but actively jumps in to fix them.

• Experience: You have 3+ years of hands-on security engineering experience, ideally in high-growth startups or cloud-native environments. You've been through at least one SOC2 or similar compliance audit.

• Technical Depth: You're comfortable reading and auditing code (Python strongly preferred), understanding infrastructure architecture, and implementing security controls across the stack—from application layer to cloud infrastructure.

• Tools: Build your own tools as needed—whether it's a quick script to audit secrets across repos or an internal dashboard to track security metrics.

• Approach: A practical, risk-based approach to security. You understand when to say no and when to help engineering ship securely. You can balance security rigor with business velocity and aren't dogmatic about perfect security at the expense of progress.

• Owning and managing SOC2, HIPAA, and other compliance certifications end-to-end, including evidence collection, control implementation, and audit coordination

• Implementing proactive security monitoring and alerting systems to detect and respond to threats in real-time across our cloud and on-prem deployments

• Building and maintaining security CI/CD tooling to catch vulnerabilities before they reach production—static analysis, dependency scanning, secrets detection, and more

• Managing our relationship with platforms like Vanta to streamline compliance workflows and maintain continuous monitoring

• Responding to customer security questionnaires and conducting security reviews for enterprise deals

• Establishing and managing our bug bounty program, triaging vulnerabilities, and coordinating remediation with engineering teams

• Working directly with the founders and customers to shape our security strategy and build trust with enterprise buyers

• Have prior experience founding a company or building security programs from scratch at early-stage startups

• Have deep experience with on-prem deployments and air-gapped environments for enterprise customers

• Have contributed to security tools, written security content, or spoken at security conferences

• Are ambitious and driven, and care a lot about doing great work with great people

• Keep up with the latest developments in application security, cloud security, and AI/ML security

This is an in person role at our office in SF. We're an early stage company which means that the role requires working hard and moving quickly. Please only apply if that excites you.

Nearly 80% of enterprise data is in unstructured formats like PDFs

PDFs are the status quo for enterprise knowledge in nearly every industry. Insurance claims, financial statements, invoices, and health records are all stored in a structure that's simply impractical for use in digital workflows. This isn't an inconvenience—it's a critical bottleneck that leads to dozens of wasted hours every week.

Traditional approaches fail at reliably extracting information in complex PDFs

OCR and even more sophisticated ML approaches work for simple text documents but are unreliable for anything more complex. Text from different columns are jumbled together, figures are ignored, and tables are a nightmare to get right. Overcoming this usually requires a large engineering effort dedicated to building specialized pipelines for every document type you work with.

Reducto breaks document layouts into subsections and then contextually parses each depending on the type of content.

This is made possible by a combination of vision models, LLMs, and a suite of heuristics we built over time. Put simply, we can help you:

• Accurately extract text and tables even with nonstandard layouts

• Automatically convert graphs to tabular data and summarize images in documents

• Extract important fields from complex forms with simple, natural language instructions

• Build powerful retrieval pipelines using Reducto's document metadata

• Intelligently chunk information using the document's layout data

At Reducto, we're invested in the well-being and growth of our team. Here's what we currently offer:

• Unlimited PTO: We believe great work requires recharging.

• Lunch: Receive a free lunch to eat with your teammates daily at the office

• Reimbursed Transportation: Provide us with your receipts and we'll take care of the costs

• Insurance: Generous health insurance covering medical, dental, and vision.

• Health and Wellness Budget: We provide up to $150/mo reimbursement for health and wellness spending, such as gym memberships, fitness classes, or similar.

• Parental Leave: Work with us to build a leave schedule that works for you and your family

Reducto is an Equal Opportunity Employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex, race, color, age, national origin, religion, physical and mental disability, genetic information, marital status, sexual orientation, gender identity/assignment, citizenship, pregnancy or maternity, protected veteran status, or any other status prohibited by applicable national, federal, state or local law.