Outset invented a better way to do research: AI-powered user interviews.

Global brands like Hubspot, Microsoft, Uber and Nestle use Outset to achieve deeper, qualitative insights about their users at unprecedented speed and scale.

The research industry is massive (>$140B and growing) and ripe for disruption. Incumbents are outdated, slow, and burdened by high-cost services. That's our opportunity.

Outset is backed by top Silicon Valley investors and raised a $30M Series B in December 2025—less than six months after our Series A—led by Radical Ventures with participation from M12 (Microsoft’s venture arm), 8VC, Y Combinator, and Adverb Ventures.

The raise follows a breakout year, with our business growing 8x as enterprise customers across industries adopt our category, AI‑moderated research, as the new standard for understanding people.

We’re a tight-knit team serving some of the world’s largest enterprises.

We are looking for an experienced Platform Security Engineer to harden the security of the systems that power our business and products.

You will help us secure both our AWS infrastructure and our code base, partnering directly with engineering and other security teams to identify risk, improve architecture, investigate incidents, and build practical security controls. The role combines application, cloud and infrastructure security, detection engineering, and incident investigation.

During security and privacy incidents, you will serve as the lead technical investigator for the platform. You will work closely with the Incident Commander (Head of Security), to determine what happened, understand the impact, preserve relevant evidence, and guide containment and remediation.

Responsibilities

Identify, assess, and help remediate security risks across our AWS infrastructure, Terraform code, application architecture, and product code.

Partner with engineering teams to design secure systems and incorporate security into normal development and operational workflows.

Participate in security reviews of RFC and PRR documentation, providing clear, actionable feedback on architecture, data flows, access controls, abuse cases, and technical risk.

Review application and infrastructure changes where additional security scrutiny is warranted.

Participate in external penetration tests, including preparation, technical coordination, analysis of findings, remediation planning, and validation of fixes.

Help improve the effectiveness and repeatability of the penetration-testing program, with the opportunity to assume ownership of the program over time.

Serve as the lead platform investigator during security and privacy incidents, working within the incident-response process led by the Head of Security.

Analyze application, cloud, identity, network, audit, and infrastructure telemetry to determine the scope, impact, and root cause of incidents.

Translate investigation findings into containment actions, durable remediations, improved detections, and clear technical documentation.

Contribute to the design, implementation, tuning, and maintenance of SIEM detection rules that monitor our platform.

Investigate and respond to alerts involving AWS infrastructure, application behavior, access patterns, data movement, and other platform activity.

Improve logging and telemetry where existing data is insufficient to detect threats or investigate incidents.

Develop security tooling and automation that help engineers identify and address vulnerabilities earlier.

Partner with SRE and engineering teams on cloud configuration, identity and access management, secrets management, vulnerability management, and infrastructure hardening.

Help establish practical security standards that reduce risk without unnecessarily slowing product development.

Qualifications

Hands-on experience in application security, cloud security, infrastructure security, or security-focused site reliability engineering.

Experience securing production systems in AWS, including familiarity with identity, networking, logging, data protection, and common cloud attack paths.