Staff Security Engineer

🕒 il y a 24 jours

🇺🇸 États-Unis – Télétravail

💵 $235 000 - $305 000 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 2%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Quanata

Site WebLinkedInTous les Emplois

201 - 500 employés

💼 Conseil

🏥 Santé

📣 Marketing

Consulting • Healthcare • Marketing

Quanata est une entreprise qui habilite les assureurs de demain avec des capacités de modélisation assistées par l'IA, des solutions de télématique en temps réel et des innovations en acquisition basée sur le risque, en se concentrant sur des solutions d'assurance contextuelle. Ils offrent une modélisation avancée des risques contextuels et comportementaux, des expériences numériques et des programmes de récompenses basés sur la télématique. Soutenue par le leader du secteur State Farm, Quanata utilise les talents et la technologie de la Silicon Valley pour stimuler l'innovation dans le secteur de l'assurance. Leur plateforme propose des solutions technologiques natives du cloud pour les assureurs, y compris des applications grand public axées sur la télématique. Basée à San Francisco, CA, Quanata vise à moderniser les processus de gestion des sinistres et à améliorer les capacités de souscription et de marketing pour les assureurs leaders du marché et les insurtechs innovantes.

Description

• Secure AI-enabled products, internal applications, APIs, services, and platforms throughout their lifecycle • Lead threat modeling, security architecture reviews, and risk assessments for LLM applications, RAG pipelines, agentic workflows, MCP servers, model providers, third-party AI tools, plugins, automations, and AI-assisted development • Define and implement secure AI engineering patterns, guardrails, standards, and reference architectures • Strengthen AWS-native infrastructure and CI/CD environments, including infrastructure-as-code, containerized workloads, secrets management, workload identity, deployment pipelines, and software supply chain controls • Partner with security operations, detection engineering, incident response, and vulnerability management teams to improve AI-related detection, observability, telemetry, and response capabilities • Evaluate AI applications, SaaS platforms, model providers, MCPs, agents, developer tools, and third-party technologies for security, privacy, access, data exposure, logging, contractual, and operational risks • Develop security guidance, training, and enablement materials for engineering and business teams • Lead cross-functional security-by-design initiatives, translate security objectives into technical requirements, influence architectural decisions, and own broader security projects and critical incident response efforts

🎯 Exigences

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related technical field; an equivalent combination of education and relevant experience; or equivalent relevant experience • 8+ years of experience in full-stack security, product security, application security, cloud security, DevSecOps, infrastructure security, or software engineering with significant security responsibilities • 5+ years of demonstrated experience working with AI, machine learning, LLM, GenAI, or AI-enabled application environments • Experience conducting security architecture reviews, threat modeling, secure design reviews, code or configuration reviews, and risk assessments • Experience evaluating and securing third-party SaaS platforms, AI tools, model providers, developer tools, APIs, integrations, and vendor-managed services • Experience partnering across security operations, detection engineering, incident response, GRC, privacy, infrastructure, and product engineering teams • Strong hands-on experience securing cloud-native environments, preferably AWS, including IAM, networking, logging, monitoring, secrets management, workload identity, infrastructure-as-code, and secure deployment practices • Strong understanding of CI/CD pipelines, source control, build systems, artifact management, deployment automation, container security, software delivery workflows, and software supply chain risk • Working knowledge of AI-specific security risks, including prompt injection, insecure tool use, excessive agency, data leakage, RAG security risks, plugin and MCP risks, insecure agent permissions, model extraction, model abuse, and AI supply chain concerns • Ability to translate AI and cloud security risks into engineering requirements, controls, standards, detections, and operational procedures • Strong written and verbal communication skills • Ability to work independently, prioritize competing risks, and lead complex cross-functional security initiatives

🏖️ Avantages

• Medical, dental, and vision insurance • Life insurance and supplemental income plans for employees and dependents • Headspace app subscription • Monthly wellness allowance • 401(k) plan with company match • One-time $2,000 payment for in-home office equipment and furniture • Fully provisioned MacBook Pro • Four weeks of PTO in the first year • Twelve weeks of fully paid parental leave for birthing and non-birthing parents • Up to $5,000 annually for professional learning, continuing education, and career development • LinkedIn Learning subscriptions • Coaching opportunities through BetterUp • Remote-first work arrangement • Occasional travel may be requested or encouraged but is not required • Core meeting hours from 9AM–2PM Pacific time