4 months ago
Base Salary
$249k - $325k/yr
Responsibilities
- Design and own the security posture assessment rule framework for evaluating device configurations, network behaviors, and access controls against security standards.
- Build and maintain a scalable rule authoring and lifecycle management system for onboarding, versioning, and deploying new standards and organizational policies.
- Monitor emerging threats, compliance requirements, regulatory changes, and CVEs and translate them into updated posture assessment rules.
- Define risk scoring and prioritization across device, network segment, and enterprise levels.
- Collaborate with platform engineering to execute rules efficiently across large network device fleets and support APIs for rule ingestion, evaluation, and results delivery.
- Engage enterprise customers and internal stakeholders to translate compliance requirements into platform capabilities and provide authoritative security expertise.
- Partner with Product and Engineering on the NSPM roadmap.
- Mentor engineers and security analysts on posture rule design, threat modeling, compliance mapping, and assessment review processes.
Requirements
- 12+ years of experience in cybersecurity, network security, or security architecture, including at least 5 years in a senior or principal capacity focused on network security posture, compliance, or policy enforcement at scale.
- Deep hands-on experience with Network Security Posture Management platforms and designing and operationalizing posture assessment rules across large enterprise networks.
- Comprehensive knowledge of NIST CSF, CIS Benchmarks, ISO 27001, FISMA, and FedRAMP, with the ability to convert control requirements into automatable assessment rules.
- Strong understanding of firewall policy analysis, routing protocol security, access control, and configuration hardening across Cisco, Juniper, Palo Alto, and Fortinet environments.
- Ability to engage executive stakeholders on compliance risk while collaborating with engineering teams on rule design, data modeling, and platform integration.
- Preferred certifications include CISSP, CISM, CCNP Security, or equivalent credentials.
- Preferred experience includes work at a network security vendor, MSSP, or large enterprise security team; Zero Trust architecture; authoring security standards, CIS Benchmark profiles, or DISA STIGs; and participating in network security policy and compliance working groups.
- Preferred familiarity with CVE lifecycle management, SBOM analysis, and vulnerability correlation for network device firmware and software supply chain risk.
Benefits
- Comprehensive medical, dental, and vision plans.
- Matching 401(k), unlimited PTO, and paid holidays.
- Parental and adoption leave, legal insurance, and a home technology stipend.
- Onsite or hybrid work available in the San Francisco Bay Area, California.
- Up to 10% travel.
About IonQ
IonQ builds trapped-ion quantum computers and offers access to them via major cloud platforms and direct systems for enterprise and research users. The public company (NYSE: IONQ), founded in 2015 and headquartered in College Park, Maryland, sells quantum hardware, cloud services, and development tools used in areas like materials modeling, optimization, and machine learning. Its systems are available through AWS Braket, Microsoft Azure Quantum, and Google Cloud Marketplace.