Qualitate
Security Engineer
$220K
New York City · On-site · Full-time · Posted Oct 20, 2026
- Experience
- 4+ years of security engineering experience; ideally some at a startup or high-growth SaaS company.
About the job
Build and operate Qualitate’s security program, secure its cloud and AI systems, lead ISO 27001 certification, and contribute production code.
What you'll do
- Harden cloud infrastructure and build logging, monitoring, and detection; remediate penetration-test findings and review security aspects of designs.
- Lead ISO 27001 certification, including scoping, risk assessments, controls, audit management, and automated evidence collection.
- Lead incident response and partner on security policies, customer security reviews, and compliance.
What they ask for
- 4+ years of security engineering experience, including hands-on compliance work.
- Cloud and infrastructure security experience with AWS or GCP, including IAM, network security, logging and monitoring, secrets management, encryption, and infrastructure-as-code.
- Experience contributing to production code and addressing penetration-test findings.
- Experience taking a company through ISO 27001 certification, including ISMS scoping, risk assessments, Statement of Applicability, controls, and audit.
Nice to have
- SOC 2 Type II experience; hands-on security tooling and compliance automation experience, such as SIEM, EDR, CSPM, Vanta, or Drata.
- Experience securing LLM-based applications or agentic systems; relevant security certifications or a financial services or market research background.
Pay
$160-220K USD base salary
Tools
AWS, GCP, IAM, SIEM, EDR, CSPM, Vanta, Drata
AI focus
Secure AI systems and LLM-based applications, including addressing prompt injection, data leakage, data exfiltration, and tool misuse; use AI models and agentic coding tools in daily work.
Model-written summary · the original posting is authoritative