Security Engineer

The Q-CTRL Infrastructure team is part of the backbone of our software platform and hardware initiatives. Guided by our vision to make the right way the easy way, our mission is to build reliable, secure and maintainable infrastructure that enables Q-CTRL to scale its revolutionary quantum technology.

Q-CTRL faces a dynamic security landscape shaped by industry, customer and compliance requirements, which is now evolving in a post-Mythos era. The Infrastructure team is expanding to bring on a Senior Security Engineer with a focus on designing, implementing, and maintaining systems to fulfil the Q-CTRL Security Objectives, as well as identifying practical ways to leverage AI within our security engineering practices.

What you’ll be doing:

• Reporting to the Engineering Manager for Infrastructure, you’ll play a hands-on role in ensuring we deliver the highest security standards for Q-CTRL products and maintain the trust our customers place in us.
• Strengthening the security of the Q-CTRL platform through contribution to key systems such as Kubernetes clusters, cloud networking, Zero Trust network architectures and firewalls.
• Consistently upholding compliance with security frameworks through the improvement of systems and processes. This includes access control mechanisms, data management and security guardrails.
• Applying knowledge in forensics and incident response to triage incidents and applying expertise to improve alerting.
• Refining and maturing our vulnerability management systems in order to improve key security metrics for Q-CTRL.
• Other duties within the Employee's skills and experience, or with reasonable training.

Ideally you’ll have:

• Previous experience in DevSecOps or DevOps with a dedicated security engineering focus.
• Cloud networking and Kubernetes experience, including knowledge of ZTNA and secure network access.
• Experience with firewall technologies, at both the cloud (e.g., AWS, GCP, Azure) and application levels.
• Experience working with SIEM/SOC tooling such as Splunk or Microsoft Sentinel to identify and triage security alerts.

It would be fantastic if you have these skills/experience but not essential:

• xperience maintaining a vulnerability management system, including running threat modelling sessions and maintaining risk registers.
• Experience with Kubernetes runtime security tooling such as Falco or Sysdig.
• Relevant security or Kubernetes certifications, such as Certified Kubernetes Security Specialist (CKS) or Offensive Security Certified Professional (OSCP).
• Experience with AI-assisted security scanning or penetration testing.
• Red teaming experience, particularly within cloud or AWS environments.
• Experience using open-source observability tooling such as OpenTelemetry and Grafana to set up security alerting and monitoring.
• Hands-on experience hardening Linux operating systems and container images.