[Hiring] Senior Security Engineer @Quest

Role Description

One Identity holds certifications because customers require them before they buy, and the ones ahead open international regulatory markets. This role builds the centralized common controls framework, with ISO 27001 and SOC 2 as the base, that each addition maps into. Evidence comes from continuous monitoring, an audit request is answered with a query rather than an email thread, and the next market is a mapping exercise that unlocks revenue opportunities for the company.

We run hosted services in Azure and AWS and ship software customers deploy in their own datacenters, so the evidence sits in cloud control planes, build pipelines, identity systems, and endpoints. Compliance analysts run the assessments and own questionnaire response. This seat builds the systems they draw from: an answer to an auditor and an answer to a customer should come from the same facts.

We're separating from Quest Software and building an independent security function. The team is lean and globally distributed, and this seat owns the compliance engineering program. Scope comes from what you ship and from what the auditors accept.

What you'll do

• Make evidence a query
• Own continuous control monitoring end to end
• Build the centralized common controls framework and the artifact layer on it
• Hold the platform to its own standard
• Put controls in code
• Partner with the principal infrastructure seat on policy as code
• Decide where agentic workflows belong in compliance engineering
• Own the program's direction
• Advance the program's metrics
• Integrate cyber risk management into the platform
• Own asset prioritization as the base layer of the program
• Front the technical side of audits

Qualifications

• Six or more years across compliance program leadership and security or compliance engineering
• Depth in at least one of two forms: a major framework carried through assessment under your leadership or GRC engineering you owned end to end
• Strategic framework design: control mapping across frameworks you shaped yourself
• Engineering depth you've used recently: Python and API integration work of your own

Requirements

• Framework fluency across ISO 27001 and SOC 2
• Familiarity with FedRAMP 20x, NIS2, DORA, and PCI DSS
• Policy-as-code frameworks and a view on where enforcement belongs
• Enough Azure and AWS depth to know where the evidence lives
• Running an audit calendar and an assessor relationship without drama
• Writing an auditor and an engineer can both act on

Benefits

• Opportunity to build and develop products at a scale few others can provide
• Enhanced career opportunities for team members to learn and grow
• Health and wellness priority for team members
• Rewarding team members for their hard work

Company Description

One Identity enables organizations of all sizes to better secure, manage, monitor, protect, and analyse information and infrastructure to help fuel innovation and drive their businesses forward.

• With team members around the globe, we intend to continue to grow revenues and add value to customers.
• Our product portfolio serves a large base of customers and we are addressing the strategic imperatives for enterprise businesses.
• Working with some of the most talented employees the industry has to offer.
• One Identity is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind.