This role is located in Somerville, MA - We are a hybrid work environment and are in the office 3+ days/per week.

Tulip brings modern technology and AI into manufacturing. Manufacturing accounts for almost 20% of the global economy and one in every seven workers on Earth, yet remains among the least digitized. More than a decade ago, we created the category to close that gap: AI-native software that puts cutting-edge tools directly in the hands of the people on the manufacturing front lines. Because we are human-centered and tech-obsessed, we are building a future of work where human ingenuity is amplified with the latest technology.

In January 2026 we became one of Boston's few new AI unicorns, reaching a $1.3B valuation. We're growing double digits in revenue year over year. The world's best manufacturers run on Tulip - turning inventory 10x faster, releasing gene therapies in hours instead of weeks, and training master craftspeople to forge engagement rings 5x more rapidly. Headquartered in Somerville, MA with offices in Germany, Hungary, Singapore, Japan, and Israel, we've been consistently named a World Economic Forum Global Innovator, a Gartner leader, and one of Built In Boston's "Best Places to Work."

We run the way we build: AI-forward, humanistic, and high ownership. We're looking for builders who are energized by complex problems, rapid cycles, and the unique opportunity to see their impact on a global scale.

About You

You’re a hands-on Security Engineer who partners closely with Infrastructure and Product Engineering teams and acts as a subject matter expert across a broad range of security domains. As part of Tulip’s Security team, you'll improve and expand our cloud, detection, and vulnerability-management work that keeps our platform and our customers safe. You will operate primarily in AWS, build and automate security controls as code (Terraform, Lambda/Python), and help mature the security posture of our environment.

What skills do I need?

5+ years of experience in security engineering, with hands-on ownership of cloud security work
Deep, hands-on experience securing AWS and/or Azure environments, including containerized and Kubernetes (EKS/AKS) workloads
Building and managing security controls as code with Terraform and Python, or similar
Authoring and tuning detections and SIEM rules, and running vulnerability and container-image scanning in CI
Working knowledge of a compliance framework such as FedRAMP, ISO 27001, or SOC 2, and the evidence practices behind it
Nice to have: incident response or forensics experience, threat modeling of new services, or running internal security exercises
Bachelor's degree in a technical field, or equivalent working experience

Key Responsibilities

Design, build, and maintain security controls as code across our cloud environments, including posture hardening and account-level guardrails
Own vulnerability management end-to-end — triage findings across environments, prioritize to control noise, and drive remediation to closure
Own the recurring alert-review workflow: tune detections, cut false positives, and improve coverage over time
Build and maintain log-ingestion and SIEM pipelines, and participate in incident response
Partner with engineers and product managers on architecture, authentication, and application security reviews, including code review and automated testing
Support our FedRAMP program and other compliance efforts — documentation upkeep, alert monitoring, evidence collection, running training exercises, and customer security questionnaires

Key Collaborators

Infrastructure and Product Engineering
IT, Legal & Compliance, and Product Management
Engineering and Security leadership

Working At Tulip

We know even great candidates experience imposter syndrome. Even if you don't match every requirement, applying gives you the opportunity to be considered.

We're building a strong, diverse team that values hard work, families, and personal well-being. Benefits of working with us include:

Direct impact on product and culture