Security Engineer: ISO 27001 & Cloud Security Lead

Qualitate; New York (NY); Hybrid; USD 160,000 - 220,000; Full time

Benefits offered by this job

Health coverage

Flexible PTO

Paid holidays

Job summary

Qualitate is seeking a dedicated security engineer to join the founding engineering team in New York. You will harden our cloud environment, build logging, monitoring, and detection, and lead the ISO 27001 initiative from scope through audit, with automated evidence collection.

We expect 4+ years of hands-on security engineering experience, including compliance work, and a strong background in AWS/GCP security, IAM, network security, and AI model governance.

Qualifications

• 4+ years of security engineering experience, including hands-on compliance work.
• Experience securing AWS or GCP environments, IAM, network security, logging/monitoring, secrets management, IaC.
• ISO 27001 experience, including scoping, risk assessments, and audit management.
• Fluent with AI models and agentic coding tools; aware of prompt injection and data leakage risks.
• High ownership, independent work style; able to defend architecture decisions in code reviews.

Responsibilities

• Harden cloud environment, build logging, monitoring, and detection.
• Remediate findings from penetration tests and audits.
• Lead ISO 27001 project from scoping to certification and automated evidence collection.
• Review designs for security implications and ensure secure construction of features.
• Write and ship production security code and guard against risk in the DL/AI stack.

Skills

Security engineering

Cloud security

Penetration testing

ISO 27001

AI model security

Ownership mentality

Tools

SIEM

EDR

CSPM

Vulnerability scanning

Drata

Vanta

Job description

Qualitate is seeking a dedicated security engineer to join the founding engineering team in New York. You will harden our cloud environment, build logging, monitoring, and detection, and lead the ISO 27001 initiative from scope through audit, with automated evidence collection.

We expect 4+ years of hands-on security engineering experience, including compliance work, and a strong background in AWS/GCP security, IAM, network security, and AI model governance.