Base Salary
$249k - $325k/yr
Responsibilities
- Design and own the security posture assessment rule framework for evaluating device configurations, network behaviors, and access controls against security standards.
- Build and maintain a scalable rule authoring and lifecycle management system for onboarding, versioning, and deploying new standards and organizational policies.
- Monitor emerging threats, compliance requirements, regulatory changes, and CVEs and translate them into updated posture assessment rules.
- Define risk scoring and prioritization across device, network segment, and enterprise levels.
- Collaborate with platform engineering to execute rules efficiently across large network device fleets and support APIs for rule ingestion, evaluation, and results delivery.
- Engage enterprise customers and internal stakeholders to translate compliance requirements into platform capabilities and provide authoritative security expertise.
- Partner with Product and Engineering on the NSPM roadmap.
- Mentor engineers and security analysts on posture rule design, threat modeling, compliance mapping, and assessment review processes.
Requirements
- 12+ years of experience in cybersecurity, network security, or security architecture, including at least 5 years in a senior or principal capacity focused on network security posture, compliance, or policy enforcement at scale.
- Deep hands-on experience with Network Security Posture Management platforms and designing and operationalizing posture assessment rules across large enterprise networks.
- Comprehensive knowledge of NIST CSF, CIS Benchmarks, ISO 27001, FISMA, and FedRAMP, with the ability to convert control requirements into automatable assessment rules.
- Strong understanding of firewall policy analysis, routing protocol security, access control, and configuration hardening across Cisco, Juniper, Palo Alto, and Fortinet environments.
- Ability to engage executive stakeholders on compliance risk while collaborating with engineering teams on rule design, data modeling, and platform integration.
- Preferred certifications include CISSP, CISM, CCNP Security, or equivalent credentials.
- Preferred experience includes work at a network security vendor, MSSP, or large enterprise security team; Zero Trust architecture; authoring security standards, CIS Benchmark profiles, or DISA STIGs; and participating in network security policy and compliance working groups.
- Preferred familiarity with CVE lifecycle management, SBOM analysis, and vulnerability correlation for network device firmware and software supply chain risk.
Benefits
- Comprehensive medical, dental, and vision plans.
- Matching 401(k), unlimited PTO, and paid holidays.
- Parental and adoption leave, legal insurance, and a home technology stipend.
- Onsite or hybrid work available in the San Francisco Bay Area, California.
- Up to 10% travel.
About IonQ
IonQ, Inc. [NYSE: IONQ] is the world’s leading quantum platform and foundry - delivering integrated quantum solutions across computing, networking, sensing, and security. IonQ’s newest generation of quantum computers, the forthcoming IonQ Tempo, will be the latest in a line of cutting-edge systems that have been helping customers and partners including Amazon Web Services, AstraZeneca, and NVIDIA achieve 20x performance results and accelerate innovation in drug discovery, materials science, financial modeling, logistics, cybersecurity, and defense. In 2025, the company achieved 99.99% two-qubit gate fidelity, setting a world record in quantum computing performance. Headquartered in College Park, Maryland, IonQ has operations in California, Colorado, Massachusetts, Tennessee, Washington, Italy, South Korea, Sweden, Switzerland, Toronto, and the United Kingdom. Our quantum computing services are available through all major cloud providers, while we also meet the needs of networking and sensing customers across land, sea, air, and space. IonQ is making quantum platforms more accessible and impactful than ever before. Learn more at IonQ.com.