[Hiring] Senior Information Security Engineer @Qualia

Role Description

As a Senior Information Security Engineer, you'll operate at the intersection of technical depth and business impact. You bring hard-won experience and sharp instincts, but you stay genuinely curious about what's new in the threat landscape. Whether you're writing policy, building detection logic, or shipping code, you'll have real autonomy to make pragmatic decisions that protect the company without standing in the way of its growth.

Security at Qualia isn't siloed—it touches every team and every product. That means you'll need to be as comfortable talking to an engineer about a misconfiguration as you are briefing a business leader on risk. A growth mindset isn't optional here; as the threats we face become more numerous and sophisticated, so must we.

Responsibilities

• Partner with stakeholders across the business to identify gaps and strengthen Qualia's security posture
• Uncover security weaknesses in technologies and processes through threat modeling, security assessments, and the development of practical security baselines
• Build and operate tooling across the full security lifecycle: prevention, detection, investigation, and response
• Evaluate the security posture of cloud environments, including reviewing configurations, monitoring for drift, and ensuring alignment with organizational security baselines
• Serve as a point of escalation for customer-reported security concerns, triaging issues, communicating clearly with affected parties, and driving issues to resolution
• Triage and reproduce vulnerability findings from penetration tests, internal tooling, and external reports—and communicate associated risk clearly to the right audiences
• Scale security impact through automation and education, making the whole organization more security-aware

Qualifications

• 4+ years of professional information security experience, with both a strong defensive foundation and familiarity with offensive techniques
• Genuine curiosity about how systems work and how they break
• The ability to write code—whether it's a quick automation script or a more substantial detection tool
• Hands-on experience with security operations tooling (e.g., SIEMs, IDS/IPS, WAFs, log monitoring platforms)
• Core IT domains, including endpoint management, networking, web applications, and cloud infrastructure
• Identity and access management concepts (e.g., SSO, MFA, role-based access controls)
• Navigating the security implications of emerging technologies—including AI and large language models
• Security automation and orchestration: experience connecting tools, writing integrations, or building workflows that reduce response times and manual effort
• Penetration testing tools (e.g., Nmap, Nessus, Metasploit, Burp Suite, or similar)
• The ability to translate complex security concepts into clear, actionable language for technical and non-technical audiences alike
• Bachelor's degree in a relevant field, or equivalent practical experience
• Information Security or IT certifications are a plus

Requirements

• Experience with or exposure to compliance frameworks (e.g., SOC 2, ISO 27001, or similar)
• Information Security Certificates (e.g., CISSP, GIAC, or similar)

Benefits

• Base annual salary of $180,000-$200,000 plus a competitive equity and benefits package
• Comprehensive health plans
• 401k program
• Commuter benefits
• Professional development
• Parental leave
• Flexible time off policy
• Robust online onboarding program
• Biweekly all hands meetings
• A variety of internal virtual events to keep employees connected