Replay
Replay

Security Lead

Full-time
On-site
New York, NY
$210K - $300K
About this role

We are looking for a Security Lead with 5+ years of experience to own the entire security program as the first dedicated security hire at a fast-growing startup handling highly sensitive enterprise data. You'll step into a role with massive ownership – building out cloud security, data governance, access controls, and SOC 2 compliance across products, pipelines, and people. This is a hands-on IC role where you'll write code, review architecture, and make real security decisions – not just write policies. You'll work directly with the engineering team and leadership to ensure the company is actually secure, not just performatively secure.

What you will be doing

  • Building and owning the company-wide security program from scratch – covering cloud infrastructure, application security, data governance, and employee/people security
  • Designing and implementing access controls, just-in-time permissions, and data governance policies to protect sensitive customer data flowing through the platform
  • Leading the SOC 2 certification process end-to-end, working with an existing vendor to get compliant and stay compliant
  • Threat-modeling product, data pipeline, and AI workflows – then building the actual technical controls to address the highest-consequence risks
  • Creating secure defaults and tooling so the engineering team can move fast without creating security incidents
as a security engineer or software engineer
Salary
$210K - $300K
Equity
Competitive equity
Visa sponsorship details
Open to visa transfers (e.g. OPT, H1B transfers)
On-site work policy
5 days in-office in Dumbo, Brooklyn
Full-time position
Location
New York, NY
Tech stack
AWS, SOC 2, IAM, Cloud Security, Application Security, AI/ML Security, Data Pipelines, Multi-tenant Architecture, Secrets Management, SIEM, Infrastructure as Code
About Replay

Replay is the primary source of real, proprietary enterprise data for the world's leading frontier AI labs. Every day, companies generate invaluable data through collaboration, communication, and building. We acquire that data, transform it into de-identified datasets that remain useful, and license it directly to the frontier labs building what comes next.


Public and synthetic data can only take frontier models so far — the next generation of AI progress depends on real, proprietary data grounded in how actual businesses operate. We've scaled from $0 to a multi-eight-figure run rate in a matter of months, and we're just getting started.


We're a fast-growing, in-person team based in Dumbo, Brooklyn, backed by Floodgate, Afore Capital, Ludlow Ventures, and Hustle Fund. Learn more at replay.ai.


Team size

14 employees

Founded

2023

LinkedIn

Visit

Total funding

$5.5M

Company locations

NYC
Replay company image - 1
About the team

At Replay, we're a small, high-conviction team that moves fast and holds each other to a high bar. There are 6 core values we live by:

  1. Be the painkiller

    • Lead with empathy, understand the fundamental problem, and fix it.

  2. Keep your promises

    • If you say you're going to do something, do it.

  3. Swing big, learn fast

    • Bias towards action, learn by doing, and pursue the big opportunities.

  4. Make it world-class

    • With everything you do, no matter how big or small, ask: "is this world-class?"

  5. Carry each other

    • We win and we lose as one team. Show humility, help your teammates.

  6. Set good goals

    • What's the outcome (not the output) you're aiming to achieve.

Tech stack
AWS, SOC 2, IAM, Cloud Security, Application Security, AI/ML Security, Data Pipelines, Multi-tenant Architecture, Secrets Management, SIEM, Infrastructure as Code
The product

Replay acquires enterprise data from collaboration tools, documents, files, and business systems, then transforms it into de-identified datasets that remain useful for training frontier AI models. We also build software that retrieves information, guides workflows, and takes carefully bounded actions — all grounded in real, proprietary data from how businesses actually operate.