Listing Description

About Hebbia

Hebbia is the first LLM productivity tool. Our general purpose suite allows users to extract, structure, and analyze information 10x faster and more accurately. Hebbia is engineered for the most complicated and sensitive data, allowing users to leverage the full capabilities of state-of-the-art LLMs over encrypted information.

Today, Hebbia powers core diligence workflows for the largest financial services firms in North America, with additional enterprise engagements in legal and federal.

We’ve raised $30M across three rounds of financing from the world's boldest AI investors, including Index Ventures, Peter Thiel, Jerry Yang, Ram Shriram, Marty Chavez, and Pieter Abbeel.

Job Description

Given the high stakes use cases that Hebbia enables, trust and security are at the center of everything we do. This role is for Hebbia’s first security engineer, who will be responsible for security infrastructure, design patterns, and guidelines. You will have the opportunity to offer our expertise to technical and non-technical stakeholders.

• Make fundamental infrastructure changes with AWS and Terraform


• Own certifications including SOC-2 compliance


• Design and implement aspects of Hebbia’s security program ranging from application security and incident response to data privacy and compliance


• Onboard vulnerability scanners and static code analysis tools, remediating findings from those tools, putting in place security incident monitoring, and building out disaster recovery protocols

This role is based out of our New York City office in Soho. 

Responsibilities

1. Infrastructure: Make fundamental infrastructure changes with AWS and Terraform


2. Compliance: Own audit and certification processing including penetration testing and SOC-2 compliance


3. Security architecture: Design and implement aspects of Hebbia’s security program ranging from application security and incident response to data privacy and compliance


4. Security tooling: Onboard vulnerability scanners, static code analysis tools, etc.  Remediate findings from those tools, put in place security incident monitoring, and building out disaster recovery protocols.

Who You Are

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field. A strong academic background with coursework in data security, cryptography, and secure software development is preferred.


• 10+ years of software development experience with a focus on security, gained at a venture-backed startup or a leading technology firm.


• Deep knowledge of security practices and compliance standards


• Experience with AWS best practices and Terraform


• Autonomous and excited about taking ownership over major initiatives.