Enterprise Security & Compliance Engineer — Contractor

Fundamental Research Labs is seeking a contractor to own enterprise security, compliance, and technical delivery for Shortcut’s AI platform. The role combines customer-facing technical leadership, backend and security engineering, production support, and ownership of compliance operations.

Responsibilities:

• Production reliability : Deliver safe backend and database changes, investigate production issues, and support incident response and recovery
• Enterprise delivery : Turn customer requirements into clear implementation plans. Build and coordinate capabilities such as enterprise identity, access controls, customer-controlled storage, private AI integrations, and audit logging
• Compliance operations : Own audit readiness, evidence collection, security documentation, and control tracking, including SOC 2 work. Coordinate with auditors, external security partners, and legal counsel
• Enterprise security reviews: Lead InfoSec meetings, answer security questionnaires, explain our architecture and data flows, and drive technical follow-ups through resolution
• Security improvements: Coordinate penetration testing, prioritize findings, implement fixes, and verify remediation with engineering
• Ongoing ownership: Maintain accurate customer-facing security materials and keep enterprise commitments and security controls current as the platform evolves

Requirements:

• 5+ years of experience in backend, platform, or security engineering, including ownership of production systems
• Strong backend engineering skills, with the ability to design APIs, investigate distributed systems, and ship reliable changes across services and cloud infrastructure
• Experience managing production databases, including schema migrations, access controls, data integrity, and recovery
• Experience responding to production incidents and participating in on-call coverage, with clear communication and follow-through on root causes
• Experience working directly with enterprise customers' IT and InfoSec teams and translating security requirements into technical delivery
• Practical knowledge of authentication libraries, identity providers, authorization, cloud IAM, network security, encryption, and data isolation
• Experience contributing to compliance audits, security assessments, or penetration-test remediation
• Ability to manage priorities independently and carry work from requirements through implementation, verification, and documentation
• Bachelor's degree in computer science, engineering, or a related field, or equivalent practical experience
• Ownership of SOC 2 audit readiness, evidence collection, and ongoing compliance operations
• Work with financial institutions or other regulated enterprises
• Security and infrastructure experience with AI platforms, including model integrations and customer data controls
• Familiarity with Better Auth and enterprise identity integrations such as SAML SSO and SCIM
• PostgreSQL, Kubernetes, AWS or Google Cloud, and TypeScript, Python, or Go