Senior Security Engineer

Key Responsibilities:

• Assess and mitigate security risks across QCI’s on-premises and AWS environments, including securing in-house applications hosted on AWS.
• Develop, implement, and maintain security policies, procedures, and best practices to safeguard systems, data, and QCI’s quantum computing platform.
• Evaluate and enhance network security by auditing network devices and security appliances (e.g., SonicWall, Cisco, Juniper), identifying vulnerabilities, and recommending configurations. Collaborate with network engineers for implementation.
• Monitor and respond to security threats and incidents by developing and executing a comprehensive incident response plan to detect, communicate, contain, and remediate security breaches effectively.
• Perform regular security audits, risk assessments, and vulnerability scans, including reviews of Windows environments, Active Directory, and GPO configurations.
• Lead and coordinate penetration testing initiatives, conducting internal assessments to identify vulnerabilities and working with third-party security firms for comprehensive evaluations.
• Automate security tasks such as monitoring, alerting, and compliance checks using scripting languages (e.g., Python, Bash).
• Raise security awareness by establishing a training program, including phishing campaigns and regular employee education to promote best practices.
• Collaborate with leadership to report on security status, vulnerabilities, and improvement plans, ensuring proactive risk management. firms to conduct comprehensive evaluations.
• Ensure compliance with third-party vendor security policies by designing and implementing security measures for systems handling external data.
• Oversee secure data handling and retention processes, including encryption, retention, deletion, and forensic destruction in alignment with industry standards such as NIST guidelines. 
• Regularly review access logs for potential security threats and unauthorized access, providing detailed reports as required by external audits or risk assessments.

Minimum Qualifications:

• 5+ years of experience in security engineering, with a focus on both cloud (AWS) and on-premises environments.
• Deep understanding of security concepts, including network security, encryption, identity and access management, and compliance standards (e.g., ISO, NIST, PCI-DSS).
• Familiarity with NIST standards for secure data handling and destruction (e.g., NIST SP 800-88).
• Experience with security tools for vulnerability scanning, incident detection, and monitoring (e.g., Black Duck, Nessus, Splunk, AWS Security Hub).
• Hands-on experience managing and securing network devices such as firewalls, routers, and switches (e.g., SonicWall, Cisco, Juniper).
• Strong scripting skills (Python, Bash, PowerShell) for automation of security tasks.
• Knowledge of Windows environments (Active Directory, GPOs) and securing Windows-based systems.
• Excellent communication skills, with the ability to convey complex security concepts to both technical and non-technical stakeholders.
• Self-motivated and able to take ownership of projects, driving them to completion.

Preferred Qualifications:

• 7+ years of experience in a security-focused role.
• Security certifications such as CISSP, CEH, CISM, or AWS Certified Security Specialty.
• Experience in designing and implementing security for microservices, containers, and serverless architectures supporting complex platforms.
• Experience ensuring compliance with third-party security policies and external regulatory requirements.
• Knowledge of secure integration practices for external APIs and third-party platforms.
• Familiarity with modern logging and monitoring solutions (e.g., ELK Stack, Prometheus, Grafana).
• Penetration testing and ethical hacking experience (e.g., Metasploit, Kali Linux).
• Knowledge of compliance requirements and experience implementing secure solutions to meet regulatory standards.

Location & Work Arrangements:

• This is a hybrid role based in New Haven, CT, with the flexibility to work from home but requiring regular onsite presence.
• Sponsorship is available for qualified candidates.