Staff Security Engineer [Remote-US]

Quanata's Veterans Job Board; Polska; Hybrid; PLN 1,135,000 - 1,565,000; Full time

Benefits offered by this job

Health, dental, vision coverage

Remote-first culture

Career development

Job summary

Quanata, LLC is a remote-first company seeking a Staff Security Engineer to secure AI-enabled systems across our infrastructure. You will partner with engineering, product, and security teams to embed security into AI solutions, pipelines, and third‑party integrations.

You will lead architecture reviews, threat modeling, and risk assessments for LLMs, RAG workflows, and CI/CD pipelines, shaping security standards and incident response on a global scale.

Qualifications

• Bachelor's degree or equivalent in a technical field.
• 8+ years in full-stack security, product security, or cloud security.
• 5+ years with AI, ML, LLM, or AI-enabled environments.
• Experience conducting security architecture reviews, threat modeling, and risk assessments.

Responsibilities

• Embed security into AI-enabled products, internal applications, APIs, services, and platforms throughout their lifecycle.
• Lead threat modeling, security architecture reviews, and risk assessments for LLM applications, RAG pipelines, agentic workflows, and CI/CD pipelines.
• Define and implement secure AI engineering patterns, guardrails, standards, and reference architectures across IAM, data protection, and logging.
• Strengthen AWS-native infrastructure, CI/CD environments, and secrets management.
• Develop practical security guidance, training, and enablement materials for engineering teams.

Job description

Join our celebrated community of veterans! We encourage all qualified veterans to explore current career opportunities specifically curated for our qVets community. These postings represent our commitment to veteran hiring and offer a chance to join a team that values your experience, discipline, and dedication. We look forward to welcoming you to our organization and supporting your continued growth and success.

The Role

As a Staff Security Engineer, you’ll play a key role in securing the AI-enabled systems, applications, and platforms that power our organization. You’ll partner closely with engineering, product, infrastructure, and security teams to make security an integral part of how AI solutions are designed, built, deployed, and operated.

This is a hands‑on technical leadership role for someone who is equally comfortable diving into architecture and threat models, evaluating emerging AI risks, and translating security requirements into practical engineering solutions. You’ll help secure everything from LLM applications and RAG pipelines to agentic AI workflows, third‑party integrations, CI/CD pipelines, and AWS‑native infrastructure.

Your impact will extend beyond AI. As a senior individual contributor, you’ll help shape our broader security strategy, establish scalable security patterns and standards, and influence technical decisions across the organization. You’ll have the autonomy to tackle complex security challenges and drive initiatives from strategy through implementation.

Your Day-to-Day

• Partner with engineering and product teams to embed security into AI-enabled products, internal applications, APIs, services, and platforms throughout their lifecycle.
• Lead threat modeling, security architecture reviews, and risk assessments for LLM applications, RAG pipelines, agentic workflows, MCP servers, model providers, third‑party AI tools, plugins, automations, and AI‑assisted development.
• Define and implement secure AI engineering patterns, guardrails, standards, and reference architectures across identity, data protection, prompt and context handling, tool permissions, logging, monitoring, abuse prevention, and incident readiness.
• Strengthen AWS‑native infrastructure and CI/CD environments, including infrastructure-as-code, containerized workloads, secrets management, workload identity, deployment pipelines, and software supply chain controls.
• Partner with security operations, detection engineering, incident response, and vulnerability management teams to improve AI-related detection, observability, telemetry, and response capabilities.
• Evaluate AI applications, SaaS platforms, model providers, MCPs, agents, developer tools, and other third‑party technologies for security, privacy, access, data exposure, logging, contractual, and operational risks.
• Develop practical security guidance, training, and enablement materials that help engineering and business teams use AI safely and build secure solutions.
• Lead cross‑functional security‑by‑design initiatives, translate security objectives into technical requirements, influence architectural decisions, and take ownership of broader security projects and critical incident response efforts as organizational needs evolve.

About You

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related technical field; an equivalent combination of education and relevant experience; or equivalent relevant experience.
• 8+ years of experience in full‑stack security, product security, application security, cloud security, DevSecOps, infrastructure security, or software engineering with significant security responsibilities.
• 5+ years of demonstrated experience working with AI, machine learning, LLM, GenAI, or AI‑enabled application environments, including hands‑on experience securing, assessing, building, integrating, or operating AI‑enabled systems.
• Proven experience conducting security architecture reviews, threat modeling, secure design reviews, code or configuration reviews, and risk assessments for modern applications, APIs, platforms, and distributed systems.
• Experience evaluating and securing third‑party SaaS platforms, AI tools, model providers, developer tools, APIs, integrations, and vendor‑managed services.
• Experience partnering across security operations, detection engineering, incident response, GRC, privacy, infrastructure, and product engineering teams.
• Strong hands‑on experience securing cloud‑native environments, preferably AWS, including IAM, networking, logging, monitoring, secrets management, workload identity, infrastructure-as-code, and secure deployment practices.
• Strong understanding of modern CI/CD pipelines, source control, build systems, artifact management, deployment automation, container security, software delivery workflows, and software supply chain risk.
• Working knowledge of AI‑specific security risks, including prompt injection, insecure tool use, excessive agency, data leakage, sensitive data exposure, RAG security risks, model and provider trust boundaries, plugin and MCP risks, insecure agent permissions, model extraction, model abuse, and AI supply chain concerns.
• Ability to translate AI and cloud security risks into practical engineering requirements, compensating controls, standards, detections, and operational procedures.
• Strong written and verbal communication skills, with the ability to explain complex technical risks, document standards, influence decisions, and drive remediation across technical and business teams.
• Demonstrated ability to work independently, self‑organize, prioritize competing risks, and lead complex cross‑functional security initiatives from concept through execution.

Bonus Points

• Experience securing agentic AI systems, MCP servers, AI agents, tool‑calling or autonomous workflows, internal copilots, LLM gateways, AI assistants, or AI‑enabled developer productivity tools.
• Experience with AWS AI/ML and GenAI services such as Amazon Bedrock, SageMaker, Comprehend, Transcribe, Textract, or related AWS‑native capabilities.
• Experience securing RAG architectures, vector databases, embedding pipelines, knowledge retrieval systems, data classification workflows, and sensitive data within AI applications.
• Experience implementing AI security guardrails such as model access controls, approved‑provider patterns, prompt and context protections, DLP integrations, logging requirements, policy enforcement, and AI usage monitoring.
• Experience with detection engineering, SIEM/SOAR platforms, cloud security posture management, vulnerability management, endpoint security, or related security operations tooling.
• Experience with Kubernetes, Docker, Terraform, GitHub Actions, GitLab CI/CD, Jenkins, or similar cloud‑native and DevOps technologies.
• Familiarity with frameworks and guidance such as the OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI Risk Management Framework, CIS benchmarks, SOC 2, ISO 27001, or cloud security reference architectures.
• Relevant certifications such as AWS Certified Security – Specialty, CISSP, CSSLP, CCSP, GIAC, OSCP, or other cloud, application security, AI security, or security engineering certifications.
• Experience as a senior individual contributor influencing engineering teams, establishing security standards, and delivering security outcomes without direct management authority.

Salary: $290,000 to $400,000

*Please note that the final salary offered will be determined based on the selected candidate's skills, and experience, as well as the internal salary structure at Quanata. Our aim is to offer a competitive and equitable compensation package that reflects the candidate's expertise and contributions to our organization.

• Benefits : We provide a wide variety of health, wellness and other benefits.These include medical, dental, vision, life insurance and supplemental income plans for you and your dependents, a Headspace app subscription, monthly wellness allowance and a 401(k) Plan with a company match.
• Work from Home Equipment : Given our virtual environment— in order to set you up for success at home, a one‑time payment of $2K will be provided to cover the purchase of in‑home office equipment and furniture at your discretion. Also, our teams work with MacBook Pros, which we will deliver to you fully provisioned prior to your first day.
• Paid Time Off: All employees accrue four weeks of PTO in their first year of employment. New parents receive twelve weeks of fully paid parental leave which may be taken within one year after the birth and/or adoption of a child. The twelve weeks is applicable to both birthing and non‑birthing parent.
• Personal and Professional Development: We’re committed to investing in and helping our people grow personally and professionally. All employees receive up to $5000 each year for professional learning, continuing education and career development. All team members also receive LinkedIn Learning subscriptions and access to multiple different coaching opportunities through BetterUp.
• Location : We are a remote‑first company for most positions so you may work from anywhere you like in the U.S, excluding U.S. territories. For most positions, occasional travel may be requested or encouraged but is not required. Some positions might require travel per the job description provided to the employee. Employees based in the San Francisco Bay Area or in Providence, Rhode Island may commute to one of our local offices as desired.
• Hours : We maintain core meeting hours from 9AM - 2PM Pacific time for collaborating with team members across all time zones.

Quanata, LLC is an equal opportunity workplace. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

This role is employed by Quanata, LLC which is a separate company in the State Farm family of companies.

If you require a reasonable accommodation, please reach out to your Talent Acquisition Partner for assistance.