Remote Security Engineer: Vulnerability & Incident Response

Qdrant; Paris; Sur place; EUR 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Remote-friendly

Open-source culture

Flexible hours

Résumé du poste

Qdrant is seeking a Mid-Level Security Engineer to own hands-on security, vulnerability management, and incident response within the Cloud Engineering team. You will be embedded with the Security Officer to identify risks, drive remediation, and enable developers with secure tooling and guidance.

You will triage vulnerability reports, validate findings in Rust, Go, and Python, and strengthen our AWS/Kubernetes security posture through automation and CI/CD hardening.

Qualifications

• 3+ years in hands-on security engineering, product security, or vulnerability management.
• Experience triaging vulnerability reports or working with bug bounty programs.
• Practical knowledge of AWS and Kubernetes security.
• Familiarity with GitHub security features and CI/CD security.

Responsabilités

• Run public bug bounty program: triage, reproduce, validate findings, communicate with researchers, drive remediation.
• Investigate vulnerabilities at code level in Rust, Go, Python tooling.
• Enable engineers to build secure systems with tooling, defaults, and documentation.
• Partner with engineering to design, review, and verify fixes and set security requirements.
• Harden and maintain GitHub org security posture and monitoring.
• Monitor and respond to security alerts across AWS, Kubernetes, CI/CD.
• Build security automation and guardrails across dev lifecycle.
• Participate in threat modeling and architecture reviews for new services.

Connaissances

Vulnerability management

Security engineering

Cloud security

Kubernetes security

GitHub security features

Code review tooling

Automation

Outils

Rust

Go

Python

Description du poste

Qdrant is seeking a Mid-Level Security Engineer to own hands-on security, vulnerability management, and incident response within the Cloud Engineering team. You will be embedded with the Security Officer to identify risks, drive remediation, and enable developers with secure tooling and guidance.

You will triage vulnerability reports, validate findings in Rust, Go, and Python, and strengthen our AWS/Kubernetes security posture through automation and CI/CD hardening.