{"id":3837629,"url":"https://alion.io/job/qualia-senior-software-engineer-ii-cloud-security","title":"Senior Software Engineer II, Cloud Security","company":{"id":58760,"name":"Qualia","domain":"qualia.com","url":"https://alion.io/company/qualia-com","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":94,"open_postings":11,"ghost_share":0,"stale_share":0,"repost_share":0.091,"time_to_fill_p50_days":627,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Austin, United States","Concord, United States","San Francisco, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"SLSA","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"Azure","optional":true},{"name":"ClickHouse","optional":true},{"name":"GCP","optional":true},{"name":"Grafana","optional":true},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true},{"name":"Okta","optional":true},{"name":"Vertex AI","optional":true}],"status":"live","first_seen_at":"2026-11-05T17:38:49Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-08T06:09:53Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":1},"description":"At Qualia, we've built the leading B2B real estate technology that transforms the home buying and selling experience into a simple, secure, and enjoyable process. Our SMB and Enterprise products bring together users from across the real estate ecosystem-homebuyers and sellers, lenders, title and escrow agents, and real estate agents-onto a single shared digital closing platform, providing greater clarity and transparency to real estate transactions. Today, through our business customers across the country, millions of consumers use Qualia to close on homes every year.\nWHAT YOU'LL WORK ON\nMillions of consumers close on homes through Qualia every year, which means our cloud carries wire instructions, identity documents, and nonpublic financial data at scale. Cloud Security owns the security of the infrastructure that platform runs on: our AWS accounts and organization, Kubernetes clusters, identity and access paths into production, the CI/CD systems that deploy to it, and the detection and response signal that tells us when something is wrong. The team works alongside Application Security, SRE, Platform, and InfoSec.\nWe're hiring a Senior Cloud Security Engineer who builds. Most of your week goes to writing code and infrastructure: Terraform modules, policy-as-code, Go services for detection and automation, and the integrations that wire them into how Qualia ships.\nYou'll be one of two engineers on the Cloud Security team, working with its EM, so the patterns you set for AWS, Kubernetes, and production access become the ones the rest of engineering follows. You'll work closely with SRE and Platform day to day, and with Application Security wherever code and infrastructure meet.\nRESPONSIBILITIES\nHarden AWS. Design and implement account structure, IAM roles and permission boundaries, network segmentation, and KMS usage, all in Terraform and Go\nSecure Kubernetes. Ship admission policies, RBAC, network policies, workload identity, and runtime controls; keep container images minimal and patched\nBuild guardrails engineers want. Write hardened, reusable IaC modules and CI policy checks that make the secure path the easy one\nEngineer detections. Build and tune cloud detections on CloudTrail, Kubernetes audit logs, and runtime signal; write the Go services and pipelines behind them and feed InfoSec's SIEM\nKill standing access. Implement just-in-time access, short-lived credentials, and secrets management for humans, services, and CI\nRun posture to zero. Build and run our in-house posture checks in Go across AWS accounts and container images; fix root causes in code and automate the fix where the class repeats\nRespond. Investigate cloud alerts and take the infrastructure side of incidents, then close the gap so it doesn't recur\nReview and teach. Review infrastructure PRs and design proposals; pair with SRE and product engineers to land fixes\nYOUR BACKGROUND THAT LIKELY MAKES YOU A MATCH\n6+ years in cloud security, infrastructure, SRE, or platform engineering, with at least 3 focused on securing production cloud environments\nDeep hands-on AWS: IAM policy evaluation, Organizations, VPC and private connectivity, KMS, CloudTrail, GuardDuty or equivalent\nProduction Kubernetes security: RBAC, admission control, network policy, pod security, and how workloads authenticate to cloud APIs\nStrong Terraform (or similar IaC) - you write and review modules, and you've built guardrails other teams depend on\nYou write production code. Go preferred; Python or TypeScript welcome if you're ready to work in Go\nYou can explain how an attacker moves from a leaked credential or a compromised pod to sensitive data, and how you'd detect each step\nClear, direct writing: findings an engineer wants to fix and design docs that hold up in review\nExperience in fintech, real estate tech, or another regulated, high-liability domain (Optional)\nCloud penetration testing, red team, or DFIR experience (Optional)\nSupply chain security: artifact signing, SBOMs, SLSA-style provenance in CI/CD (Optional)\nOpen source security tooling, published research, or conference talks (Optional)\nTHE TECH STACK YOU'LL SECURE\nAWS (primary), some Azure, and limited GCP (Vertex AI)\nKubernetes and a microservice architecture, defined in Terraform and our infrastructure-as-code monorepo\nOkta for workforce identity and SSO into AWS\nNodeJS / TypeScript services, MongoDB, and an internal ClickHouse + Grafana security telemetry pipeline\nGo for internal security tooling and detection services\nWe are a remote-first development organization that values flexibility in how our teams work. In addition to supporting fully remote roles, we have an office in Austin, with a hybrid option available for those who live nearby and prefer in-person collaboration.\nWhile this role is based in Austin, Texas, we're open to exploring remote possibilities for qualified candidates.\nWHY QUALIA\nQualia is made up of incredibly bright, mission-driven coworkers who are passionate about using technology to solve real-world problems-and we're growing quickly. In order to continue building an engaging and dynamic organization, we're committed to giving everyone the support they need to do great work.\nOur benefits package is designed to allow our team members to be their best selves, both in and out of the workplace. In addition to comprehensive health plans, a 401k program, and commuter benefits, we prioritize family and personal well-being through professional development, parental leave, and a flexible time off policy. Qualia offers a robust online onboarding program to train new hires, biweekly all hands meetings, and a variety of internal virtual events to keep employees connected.\nWe believe diverse perspectives and backgrounds are critical to building great technology, and our goal is to cultivate an environment where people feel equally valued and respected. Qualia is proud to be an equal-opportunity workplace, and we welcome applicants from all backgrounds regardless of race, color, ancestry, religion, gender identity or expression, sexual orientation, marital status, age, citizenship, socioeconomic status, disability, or veteran status.\nBy submitting your application, you acknowledge and agree to the collection, processing, and use of your personal information as described in our Employee Data Privacy Notice.","description_format":"text","description_chars":6334,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Flexible time off","Parental leave","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Real Estate","Document Management","PropTech"],"lifecycle":[{"event":"open","at":"2026-11-05T21:32:49Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 8 · green card filings: 1","filings_12m":8,"filings_prev_12m":2,"green_card_filings_12m":1,"median_offered_wage_usd":148056,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":627,"reasons":["conf:3","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/qualia-senior-software-engineer-ii-cloud-security","json_url":"https://alion.io/job/qualia-senior-software-engineer-ii-cloud-security.json","meta":{"generated_at":"2026-11-08T07:29:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16318,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58760},"rest":"https://alion.io/mcp/rest/get_company?id=58760"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fqualia-senior-software-engineer-ii-cloud-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fqualia-senior-software-engineer-ii-cloud-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fqualia-senior-software-engineer-ii-cloud-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/qualia-senior-software-engineer-ii-cloud-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fqualia-senior-software-engineer-ii-cloud-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3837629}},{"tool":"search_jobs","arguments":{"company":"qualia.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3837629},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}