[Hiring] Engineering Manager II, Cloud Security @Qualia

Role Description

We're hiring a player-coach Engineering Manager to build and lead Qualia's Cloud Security team. You'll set the direction for how we secure AWS, Kubernetes, and the paths into production, hire the two senior engineers who'll do it with you, and stay close enough to the work to review a Terraform plan or an IAM policy yourself.

The mandate is to make the secure configuration the default one. That means:

• Guardrails
• Organization-level policy
• Paved-road modules that product teams adopt
• Detection that catches drift and abuse in minutes
• Utilizing AI for posture findings, access reviews, or alert triage

Responsibilities

• Lead and grow the team.
• Hire, coach, and set goals for Cloud Security engineers; own delivery against the roadmap.
• Own cloud security architecture.
• Set standards for AWS account structure, network segmentation, encryption, and workload isolation across our Kubernetes clusters.
• Run identity and access for production.
• Drive least privilege across human and machine identities: SSO into AWS, role design, just-in-time access, and secrets management.
• Ship guardrails as code.
• Own posture management.
• Build detection and response.
• Secure the delivery pipeline.
• Partner across engineering.

Qualifications

• 7+ years in security, infrastructure, or platform engineering on production cloud systems, with 2+ years managing or leading engineers.
• Deep hands-on AWS security: IAM and Organizations, VPC design, sops, logging, and the services that carry sensitive data.
• Production Kubernetes security experience: RBAC, network policy, admission control, workload identity, and container image hygiene.
• Infrastructure-as-code fluency (Terraform or similar) and a record of shipping guardrails engineers adopted.
• You've built or scaled a cloud security function, or a major part of one, and can show what changed because of it.
• Strong written communication: you can write the architecture standard, the incident post-mortem, and the one-page risk summary for leadership.
• You measure impact by exposure removed and time-to-detect, and you can point to numbers.
• Experience in fintech, real estate tech, or another regulated, high-liability domain (Optional).
• Detection engineering or DFIR background in cloud environments (Optional).
• Hands-on use of LLMs or agents in a security workflow such as posture triage, access review, or alert enrichment (Optional).

Tech Stack

• AWS (primary), some Azure, and limited GCP (Vertex AI).
• Kubernetes and a microservice architecture, defined in Terraform and our infrastructure-as-code monorepo.
• Okta for workforce identity and SSO into AWS.
• NodeJS / TypeScript services, MongoDB, and an internal ClickHouse + Grafana security telemetry pipeline.
• Go for internal security tooling and detection services.

Benefits

• Comprehensive health plans.
• 401k program.
• Commuter benefits.
• Professional development.
• Parental leave.
• Flexible time off policy.
• Robust online onboarding program.
• Biweekly all hands meetings.
• Variety of internal virtual events to keep employees connected.

Company Description

Qualia is made up of incredibly bright, mission-driven coworkers who are passionate about using technology to solve real-world problems—and we're growing quickly. We believe diverse perspectives and backgrounds are critical to building great technology, and our goal is to cultivate an environment where people feel equally valued and respected. Qualia is proud to be an equal-opportunity workplace, and we welcome applicants from all backgrounds regardless of race, color, ancestry, religion, gender identity or expression, sexual orientation, marital status, age, citizenship, socioeconomic status, disability, or veteran status.