1 day ago
New York, NY, USAMid Level
Base Salary
$160k - $220k/yr
Responsibilities
- Harden Qualitate’s cloud environment and build logging, monitoring, detection, and response capabilities.
- Remediate findings from penetration tests and contribute hands-on code to the production codebase.
- Act as the security reviewer for feature and architecture design documents.
- Lead ISO 27001 certification from scoping and risk assessment through control implementation, evidence collection, and certification audit.
- Automate compliance evidence collection and build technical controls for access management, logging, vulnerability management, encryption, data segregation, and access control.
- Secure LLM-based applications and agentic systems against prompt injection, data leakage, data exfiltration, and tool misuse.
- Define security architecture and roadmap, lead incident response, and partner with compliance and legal teams on policies and customer security reviews.
Requirements
- At least 4 years of security engineering experience, ideally including hands-on work securing cloud infrastructure and building compliance programs at a startup or high-growth SaaS company.
- Strong cloud and infrastructure security experience with AWS or GCP, including IAM, network security, logging and monitoring, secrets management, encryption, and infrastructure-as-code.
- Ability to contribute to a production codebase and address penetration-test findings.
- Experience taking a company through ISO 27001 certification, including ISMS scoping, risk assessments, Statement of Applicability, control implementation, and audit management.
- Fluency with AI models and agentic coding tools, including understanding LLM security and data-governance risks.
- Experience with security tooling such as SIEM, EDR, CSPM, vulnerability scanning, container-image scanning, and compliance automation platforms such as Vanta or Drata.
- Experience securing LLM-based applications and agentic systems, including red-teaming for prompt injection, data exfiltration, and tool misuse.
- Experience building technical controls for data segregation and access; financial-services or expert-network experience is desirable.
- Security certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CCSP, AWS Security Specialty, or OSCP are desirable.
- SOC 2 Type II experience and a background in financial services or market research are desirable.
- Ability to work independently, make architecture decisions, communicate proactively, and defend technical decisions in code review.
Benefits
- Base salary of $160-220K, based on experience.
- Meaningful early-stage equity grant with upside tied to company growth.
- Health coverage, flexible PTO, and paid holidays.
- Full-time, in-person in New York City Monday through Wednesday and remote Thursday and Friday.
Tech Stack
Categories
About Qualitate
Qualitate builds an AI-native expert intelligence platform for investment and corporate strategy teams, automating primary research from expert recruitment to AI‑moderated interviews and insight synthesis. It sells enterprise subscriptions and research services spanning moderated calls, transcript libraries, analyst research, and market and company intelligence. Founded in 2024 and headquartered in New York, its platform tracks over 10,000 public and private companies for clients including large enterprises, hedge funds, and private capital firms.