Cloud Security & Compliance Engineer

Somerville, Massachusetts, United States

Mobi.

AI is a leading AI platform and solution provider born from MIT's Computer Science and Artificial Intelligence Lab, specializing in building collaborative AI systems that solve complex business challenges in travel, transportation, and process automation. With a proven track record of transforming customer experiences and business operations for global brands, Mobi has brought cutting‑edge AI technology from research to real‑world applications.

We believe the best ideas emerge when diverse perspectives come together, so we’re building a team that truly reflects that belief. If you’re energized by complex challenges, inspired by working alongside thoughtful teammates, and passionate about building technology that enhances—rather than replaces—what makes us human, you’ll feel right at home here.

Our work is centered on five core values:

• Show up, be you
  . We welcome every kind of thinker, maker, and teammate: quiet or bold, methodical or messy, with all their talents and quirks. Inclusion isn’t a checkbox—it’s how we connect, grow together, and do our best work.
• Be scrappy, stay steady. We’re resilient and quick on our feet, adapting with creativity and staying grounded when things shift.
• Create transparency, collaborate better. We believe knowledge grows when it’s shared. Clear, open communication builds trust and strengthens collaboration.
• Foster community, be compassionate. We show up for our teammates, customers, and neighbors. Strong businesses grow from relationships built with care and grounded in shared effort.
• Build thoughtfully, create impact. We design for clarity, build for scale, and measure success through real‑world impact.

As a Cloud Security & Compliance Engineer at Mobi, you’ll partner with a dynamic, forward‑thinking team to build the resilient foundations that power our cutting‑edge web experiences and AI‑driven solutions. You’ll play a key role as the Security Engineering SME and Systems Builder, shaping the technologies that protect our travel‑planning and logistics systems, which are used by some of the world’s leading brands.

This role blends technical engineering with the meticulous follow‑through needed for compliance and documentation. You’ll be a representative for our customers and a creative partner for our engineers, focusing on audit‑readiness as much as secure code. It’s an engaging, high‑impact role where you move the business forward by finding "the secure way" to help our team ship and scale.

• Develop, test, and maintain scalable security guardrails to ensure a consistent, secure‑by‑default posture across our AWS and GCP environments.
• Navigate the human side of security by acting as a collaborative partner to our engineering teams; you will identify missing standards, negotiate solutions, and proactively suggest "the secure way" to build features rather than acting as a gatekeeper.
• Partner with our customers' security teams to align our architecture with their specific security patterns and represent Mobi’s robust security posture during technical deep‑dives and reviews.
• Translate high‑level security patterns and compliance frameworks (SOC 2 and GDPR) into high‑quality, hardened infrastructure code and automated evidence collection.
• Review system designs to troubleshoot vulnerabilities, debug misconfigurations, and resolve architectural security gaps before they reach production.
• Own the security lifecycle—from initial threat modelling and customer alignment through to automated testing, shipping, and audit‑ready reporting.
• Implement best practices for code quality, secret management, and maintainable security patterns across the entire engineering organization.
• Stay current with cloud‑native security trends, multi‑cloud vulnerabilities, and emerging AI‑driven security technologies to proactively protect our AI‑powered solutions.

• Bachelor’s degree in Computer Science, Engineering, or a related field—or equivalent practical experience in technical security.
• Strong hands‑on experience securing AWS and GCP infrastructure (e.g., API Gateway, Identity,…