Staff Security Engineer

🔥 15 hours ago

🇺🇸 United States – Remote

💵 $235k - $305k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 2%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Quanata

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

📣 Marketing

Consulting • Healthcare • Marketing

Quanata is a company that empowers the insurers of tomorrow with AI-assisted modeling capabilities, real-time telematics solutions, and risk-based acquisition innovations, focusing on context-based insurance solutions. They provide advanced contextual and behavioral risk modeling, digital experiences, and telematics-driven rewards programs. Quanata is backed by industry leader State Farm and utilizes Silicon Valley talent and technology to drive innovation in the insurance sector. Their platform offers cloud-native technology solutions for insurers, including telematics-focused consumer-facing apps. Based in San Francisco, CA, Quanata aims to modernize claims processes and enhance underwriting and marketing capabilities for market-leading insurers and innovative insurtechs.

📋 Description

• Secure AI-enabled products, internal applications, APIs, services, and platforms throughout their lifecycle • Lead threat modeling, security architecture reviews, and risk assessments for LLM applications, RAG pipelines, agentic workflows, MCP servers, model providers, third-party AI tools, plugins, automations, and AI-assisted development • Define and implement secure AI engineering patterns, guardrails, standards, and reference architectures • Strengthen AWS-native infrastructure and CI/CD environments, including infrastructure-as-code, containerized workloads, secrets management, workload identity, deployment pipelines, and software supply chain controls • Partner with security operations, detection engineering, incident response, and vulnerability management teams to improve AI-related detection, observability, telemetry, and response capabilities • Evaluate AI applications, SaaS platforms, model providers, MCPs, agents, developer tools, and third-party technologies for security, privacy, access, data exposure, logging, contractual, and operational risks • Develop security guidance, training, and enablement materials for engineering and business teams • Lead cross-functional security-by-design initiatives, translate security objectives into technical requirements, influence architectural decisions, and own broader security projects and critical incident response efforts

🎯 Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related technical field; an equivalent combination of education and relevant experience; or equivalent relevant experience • 8+ years of experience in full-stack security, product security, application security, cloud security, DevSecOps, infrastructure security, or software engineering with significant security responsibilities • 5+ years of demonstrated experience working with AI, machine learning, LLM, GenAI, or AI-enabled application environments • Experience conducting security architecture reviews, threat modeling, secure design reviews, code or configuration reviews, and risk assessments • Experience evaluating and securing third-party SaaS platforms, AI tools, model providers, developer tools, APIs, integrations, and vendor-managed services • Experience partnering across security operations, detection engineering, incident response, GRC, privacy, infrastructure, and product engineering teams • Strong hands-on experience securing cloud-native environments, preferably AWS, including IAM, networking, logging, monitoring, secrets management, workload identity, infrastructure-as-code, and secure deployment practices • Strong understanding of CI/CD pipelines, source control, build systems, artifact management, deployment automation, container security, software delivery workflows, and software supply chain risk • Working knowledge of AI-specific security risks, including prompt injection, insecure tool use, excessive agency, data leakage, RAG security risks, plugin and MCP risks, insecure agent permissions, model extraction, model abuse, and AI supply chain concerns • Ability to translate AI and cloud security risks into engineering requirements, controls, standards, detections, and operational procedures • Strong written and verbal communication skills • Ability to work independently, prioritize competing risks, and lead complex cross-functional security initiatives

🏖️ Benefits

• Medical, dental, and vision insurance • Life insurance and supplemental income plans for employees and dependents • Headspace app subscription • Monthly wellness allowance • 401(k) plan with company match • One-time $2,000 payment for in-home office equipment and furniture • Fully provisioned MacBook Pro • Four weeks of PTO in the first year • Twelve weeks of fully paid parental leave for birthing and non-birthing parents • Up to $5,000 annually for professional learning, continuing education, and career development • LinkedIn Learning subscriptions • Coaching opportunities through BetterUp • Remote-first work arrangement • Occasional travel may be requested or encouraged but is not required • Core meeting hours from 9AM–2PM Pacific time