Security Engineer

GUAVA AI

Security Engineer

Los Angeles, CA | In Office

Reports to: Chief Revenue Officer

Location: Downtown Los Angeles (DTLA)

Type: Full-time

Compensation: $120,000– $165,000 + equity

About Guava

Guava is the voice platform built for regulated industries — the calls that have to be right. Trained on 10B+ live agent minutes and in regulated production. We serve healthcare systems, banks, insurance carriers, BPOs, and tech-native companies that need voice infrastructure they can stake their business on.

Security isn't a checkbox at Guava — it's the reason our customers can trust us with real calls, real patient data, and real financial transactions. We're looking for a Security Engineer to help us build, harden, and prove out the security posture that our most regulated customers require.

The Role

Guava is looking for a Security Engineer to own and mature security across our infrastructure, product, and internal systems. You will work hands-on to reduce risk across our cloud environment and voice pipeline, support our compliance program (SOC 2, HITRUST, HIPAA, and PCI-adjacent requirements), and partner directly with engineering to build security into the product rather than bolt it on afterward.

This is a hands-on, individual-contributor role reporting to the Head of Engineering. You will be one of the first dedicated security hires at Guava, with real ownership over how our security program is built and a direct line to engineering leadership.

What You'll Do

• Own security architecture and hardening across our cloud infrastructure, voice pipeline, and internal systems.
• Design and implement security controls for identity and access management, network segmentation, encryption, and secrets management.
• Partner with engineering on secure design reviews, threat modeling, and code-level security guidance for new features.
• Provide technical guidance on application, API, cloud, platform, and AI security.
• Support Guava's compliance program (SOC 2, HITRUST i1, HIPAA, and customer security questionnaires), including evidence collection and control implementation.
• Build and maintain security monitoring, logging, and alerting across production systems; lead incident response when issues arise.
• Manage relationships with external security vendors, auditors, and penetration testers, and drive remediation of findings.
• Own security-related tooling and automation (SAST/DAST, dependency scanning, CSPM, SIEM) as the team and platform scale.
• Contribute to security policy, employee security training, and vendor risk assessments in partnership with People Ops and compliance.

What We're Looking For

• 4+ years of experience in security engineering, application security, or a related infrastructure/security role.
• Hands-on experience securing cloud infrastructure (AWS, GCP, or Azure) — IAM, networking, encryption, and secrets management.
• Experience supporting a compliance framework such as SOC 2, HITRUST, HIPAA, ISO 27001, or PCI DSS.
• Comfortable reading and reviewing code for security issues, and working directly with engineers to fix them.
• Practical experience with vulnerability management, security monitoring/SIEM tooling, and incident response.
• Strong written communication — you can explain risk and tradeoffs clearly to both engineers and auditors.
• Based in or willing to work from Guava's Downtown Los Angeles (Arts District) office.

Nice to Haves

• Experience securing real-time or telephony/voice systems (SIP/PSTN, WebRTC, or similar).
• Experience at a company selling into healthcare, financial services, insurance, or other highly regulated industries.
• Relevant certifications (OSCP, CISSP, GIAC, or similar) — not required, but a plus.
• Experience building a security program from an early stage, rather than maintaining an established one.

Why Guava

• Own security for a voice AI platform running in real, regulated production — not a research demo.
• Direct access to engineering leadership; real influence over how the security program is built.
• Join at a stage where you can shape the architecture and process, not just maintain someone else's.
• Full health, dental, vision; employer 401(k) match; flexible PTO.



Guava is an equal opportunity employer. We welcome applicants of all backgrounds and are committed to building a diverse and inclusive team.