Lead Security and Infra Engineer

About Us: Liberate builds AI agents to automate manual tasks for the $2.7T insurance industry. We started with voice — the hardest and most valuable channel in insurance — and are now expanding into full workflow automation across sales, servicing, and claims. Our long-term vision is to build reasoning agents capable of handling the entire spectrum of insurance carrier and broker operations. We've raised $72M to date, including a $50M Series B in October 2025, backed by top-tier venture firms. Location: Boston or Bay Area, hybrid preferred (2x/week in office) Reporting: VP Engineering, dotted line partnership with CPO, and Customer Success leadership Mission Build the secure, reliable infrastructure foundation for Liberate’s agentic platform. You will be a hands-on owner of cloud infrastructure and DevOps while serving as Liberate’s senior technical owner and primary point of contact for product security, cloud security, and compliance. Make the safest path the fastest path so engineers can ship quickly without normal mistakes becoming outages, security incidents, or compliance failures. About the role This is intentionally an infrastructure-heavy security role. You will spend most of your time building and operating production cloud infrastructure, deployment systems, and developer tooling while owning security across the product and platform. This is not a governance-only CISO role or a corporate IT/help desk role. As Liberate’s first dedicated security engineering leader, you will define the function, use vendors where they create leverage, and have the opportunity to build the team as the company scales. What you will do Cloud infrastructure and DevOps Own and evolve Liberate’s production cloud foundation across AWS, Kubernetes/EKS, networking, compute, storage, data services, environment isolation, and production access. Build reusable Terraform modules, CI/CD pipelines, deployment automation, configuration standards, and self-service paths that make environments repeatable and safe. Improve reliability and operability through observability, alerting, SLOs, capacity and cost management, backup and recovery, disaster recovery, and production-readiness standards. Participate in the engineering on-call model, lead infrastructure incidents when needed, and convert incidents and operational toil into durable platform improvements. Partner with Platform and product engineering teams on architecture and rollout patterns, reducing manual work and broad privileges through automation and secure defaults. Security engineering and architecture Serve as Liberate’s senior technical security owner and escalation point, leading threat modeling and secure design reviews for agent capabilities, tool execution, memory, integrations, multi-tenant services, and sensitive data flows. Build a secure SDLC engineers actually follow, including requirements, code, dependency, container, and infrastructure-as-code scanning, CI gates, security tests, and paved-road defaults. Own identity, authorization, secrets, key management, encryption, network boundaries, audit trails, production access, and tenant and data-isolation patterns. Establish practical controls for agentic AI risks, including scoped tool access, credential handling, data exfiltration, prompt injection, model and vendor risk, and traceable actions. Run vulnerability management end to end, including prioritization, remediation, penetration tests, and third-party reviews. Build useful security telemetry, detection, playbooks, and tabletop exercises, then lead calm, accountable response and durable follow-through when incidents occur. Compliance and customer trust Own SOC 2 and related compliance programs end to end: control design, technical implementation, evidence quality, audit readiness, and continuous effectiveness. Translate compliance requirements into automated technical controls and operational practices rather than manual checklists. Lead audits, penetration tests, customer sec…