Staff Security Engineer

🕒 Setembro 22

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $235.000 - $305.000 / ano

⏰ Tempo Integral

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 2%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Quanata

SiteLinkedInTodas as Vagas

201 - 500 funcionários

💼 Consultoria

🏥 Saúde

📣 Marketing

Consulting • Healthcare • Marketing

A Quanata é uma empresa que capacita as seguradoras do amanhã com capacidades de modelagem assistida por IA, soluções de telemática em tempo real e inovações em aquisições baseadas em risco, focando em soluções de seguro baseadas em contexto. Eles fornecem modelagem avançada de risco contextual e comportamental, experiências digitais e programas de recompensas guiados por telemática. A Quanata é apoiada pelo líder do setor State Farm e utiliza talentos e tecnologia do Vale do Silício para impulsionar a inovação no setor de seguros. Sua plataforma oferece soluções tecnológicas nativas da nuvem para seguradoras, incluindo aplicativos voltados para o consumidor focados em telemática. Com sede em San Francisco, CA, a Quanata visa modernizar processos de sinistros e aprimorar as capacidades de subscrição e marketing para seguradoras líderes de mercado e insurtechs inovadoras.

Descrição

• Secure AI-enabled products, internal applications, APIs, services, and platforms throughout their lifecycle • Lead threat modeling, security architecture reviews, and risk assessments for LLM applications, RAG pipelines, agentic workflows, MCP servers, model providers, third-party AI tools, plugins, automations, and AI-assisted development • Define and implement secure AI engineering patterns, guardrails, standards, and reference architectures • Strengthen AWS-native infrastructure and CI/CD environments, including infrastructure-as-code, containerized workloads, secrets management, workload identity, deployment pipelines, and software supply chain controls • Partner with security operations, detection engineering, incident response, and vulnerability management teams to improve AI-related detection, observability, telemetry, and response capabilities • Evaluate AI applications, SaaS platforms, model providers, MCPs, agents, developer tools, and third-party technologies for security, privacy, access, data exposure, logging, contractual, and operational risks • Develop security guidance, training, and enablement materials for engineering and business teams • Lead cross-functional security-by-design initiatives, translate security objectives into technical requirements, influence architectural decisions, and own broader security projects and critical incident response efforts

🎯 Requisitos

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related technical field; an equivalent combination of education and relevant experience; or equivalent relevant experience • 8+ years of experience in full-stack security, product security, application security, cloud security, DevSecOps, infrastructure security, or software engineering with significant security responsibilities • 5+ years of demonstrated experience working with AI, machine learning, LLM, GenAI, or AI-enabled application environments • Experience conducting security architecture reviews, threat modeling, secure design reviews, code or configuration reviews, and risk assessments • Experience evaluating and securing third-party SaaS platforms, AI tools, model providers, developer tools, APIs, integrations, and vendor-managed services • Experience partnering across security operations, detection engineering, incident response, GRC, privacy, infrastructure, and product engineering teams • Strong hands-on experience securing cloud-native environments, preferably AWS, including IAM, networking, logging, monitoring, secrets management, workload identity, infrastructure-as-code, and secure deployment practices • Strong understanding of CI/CD pipelines, source control, build systems, artifact management, deployment automation, container security, software delivery workflows, and software supply chain risk • Working knowledge of AI-specific security risks, including prompt injection, insecure tool use, excessive agency, data leakage, RAG security risks, plugin and MCP risks, insecure agent permissions, model extraction, model abuse, and AI supply chain concerns • Ability to translate AI and cloud security risks into engineering requirements, controls, standards, detections, and operational procedures • Strong written and verbal communication skills • Ability to work independently, prioritize competing risks, and lead complex cross-functional security initiatives

🏖️ Benefícios

• Medical, dental, and vision insurance • Life insurance and supplemental income plans for employees and dependents • Headspace app subscription • Monthly wellness allowance • 401(k) plan with company match • One-time $2,000 payment for in-home office equipment and furniture • Fully provisioned MacBook Pro • Four weeks of PTO in the first year • Twelve weeks of fully paid parental leave for birthing and non-birthing parents • Up to $5,000 annually for professional learning, continuing education, and career development • LinkedIn Learning subscriptions • Coaching opportunities through BetterUp • Remote-first work arrangement • Occasional travel may be requested or encouraged but is not required • Core meeting hours from 9AM–2PM Pacific time

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo