RESPONSIBILITIES
Harden AWS. Design and implement account structure, IAM roles and permission boundaries, network segmentation, and KMS usage, all in Terraform and Go
Secure Kubernetes. Ship admission policies, RBAC, network policies, workload identity, and runtime controls; keep container images minimal and patched
Build guardrails engineers want. Write hardened, reusable IaC modules and CI policy checks that make the secure path the easy one
Engineer detections. Build and tune cloud detections on CloudTrail, Kubernetes audit logs, and runtime signal; write the Go services and pipelines behind them and feed InfoSec's SIEM
Kill standing access. Implement just-in-time access, short-lived credentials, and secrets management for humans, services, and CI
Run posture to zero. Build and run our in-house posture checks in Go across AWS accounts and container images; fix root causes in code and automate the fix where the class repeats
Respond. Investigate cloud alerts and take the infrastructure side of incidents, then close the gap so it doesn't recur
Review and teach. Review infrastructure PRs and design proposals; pair with SRE and product engineers to land fixes
YOUR BACKGROUND THAT LIKELY MAKES YOU A MATCH
6+ years in cloud security, infrastructure, SRE, or platform engineering, with at least 3 focused on securing production cloud environments
Deep hands-on AWS: IAM policy evaluation, Organizations, VPC and private connectivity, KMS, CloudTrail, GuardDuty or equivalent
Production Kubernetes security: RBAC, admission control, network policy, pod security, and how workloads authenticate to cloud APIs
Strong Terraform (or similar IaC) — you write and review modules, and you've built guardrails other teams depend on
You write production code. Go preferred; Python or TypeScript welcome if you're ready to work in Go
You can explain how an attacker moves from a leaked credential or a compromised pod to sensitive data, and how you'd detect each step
Clear, direct writing: findings an engineer wants to fix and design docs that hold up in review
Experience in fintech, real estate tech, or another regulated, high-liability domain (Optional)
Cloud penetration testing, red team, or DFIR experience (Optional)
Supply chain security: artifact signing, SBOMs, SLSA-style provenance in CI/CD (Optional)
Open source security tooling, published research, or conference talks (Optional)
THE TECH STACK YOU'LL SECURE
AWS (primary), some Azure, and limited GCP (Vertex AI)
Kubernetes and a microservice architecture, defined in Terraform and our infrastructure-as-code monorepo
Okta for workforce identity and SSO into AWS
NodeJS / TypeScript services, MongoDB, and an internal ClickHouse + Grafana security telemetry pipeline
Go for internal security tooling and detection services
We are a remote-first development organization that values flexibility in how our teams work. In addition to supporting fully remote roles, we have an office in Austin, with a hybrid option available for those who live nearby and prefer in-person collaboration.
While this role is based in Austin, Texas, we're open to exploring remote possibilities for qualified candidates.
WHY QUALIA
Qualia is made up of incredibly bright, mission-driven coworkers who are passionate about using technology to solve real-world problems—and we're growing quickly. In order to continue building an engaging and dynamic organization, we're committed to giving everyone the support they need to do great work.
Our benefits package is designed to allow our team members to be their best selves, both in and out of the workplace. In addition to comprehensive health plans, a 401k program, and commuter benefits, we prioritize family and personal well-being through professional development, parental leave, and a flexible time off policy. Qualia offers a robust online onboarding program to train new hires, biweekly all hands meetings, and a variety of internal virtual events to keep employees connected.
We believe diverse perspectives and backgrounds are critical to building great technology, and our goal is to cultivate an environment where people feel equally valued and respected. Qualia is proud to be an equal-opportunity workplace, and we welcome applicants from all backgrounds regardless of race, color, ancestry, religion, gender identity or expression, sexual orientation, marital status, age, citizenship, socioeconomic status, disability, or veteran status.
By submitting your application, you acknowledge and agree to the collection, processing, and use of your personal information as described in our Employee Data Privacy Notice.
#LI-Remote
