Senior Security Engineer - North America

Do you ever have the urge to do things better than the last time? We do. And it’s this urge that drives us every day. Our environment of discovery and innovation means we’re able to create deep and valuable relationships with our clients to create real change for them and their industries. It’s what got us here – and it’s what will make our future. At Quantexa, you’ll experience autonomy and support in equal measures allowing you to form a career that matches your ambitions. 41% of our colleagues come from an ethnic or religious minority background. We speak over 20+ languages across our 50+ nationalities, creating a sense of belonging for all. 

Opportunity

This role combines deep technical security engineering with operational assurance and platform enablement. The position is responsible for shaping and sustaining secure development practices, strengthening cloud and SaaS controls, and improving detection and response maturity across Quantexa.

You will work closely with engineering, platform, and operational teams to build secure delivery patterns and ensure they are consistently adopted. This includes guiding DevOps team approaches, embedding automated security testing, consolidating compliance checks, and influencing design standards that support secure development and deployment. You will provide both assurance and hands on oversight to ensure tooling such as CI/CD, infrastructure as code, identity controls, and container orchestration remain hardened, monitored, and aligned to recognised best practices.

On the operational side, you will lead the improvement of security controls and monitoring capabilities across cloud platforms, SaaS services, and enterprise toolsets. You will integrate threat intelligence, refine detection rules, enhance incident readiness, and drive remediation activities based on security posture findings. You will work with stakeholders to review architectural risk, conduct threat modelling, and support operational response to emerging issues.

Success in this role requires an ability to translate complex risks into actionable change, influence adoption of secure practices, and build trust with engineering and senior technical stakeholders. You will balance preventative engineering activities with investigative skills and operational discipline, creating a feedback loop that strengthens resilience over time.

The ideal candidate brings strong experience across cloud security, DevOps enablement, identity and access controls, SaaS security, threat detection platforms, and incident response. You will be a self-starter who can navigate ambiguity, challenging stakeholders, collaborate across varied teams, and drive holistic improvements that enhance Quantexa’s overall security posture.

The role is open in New York, New Jersey, Connecticut, North Carolina, Massachusetts, Pennsylvania, Virginia, Maryland, Washington, D.C., and Florida.

Requirements

Security Architecture & Engineering

• Embed security within CI/CD pipelines, delivery workflows, and infrastructure automation through testing, scanning, and policy enforcement.
• Architect and maintain technical security guardrails for cloud native platforms and infrastructure as code deployments to ensure consistent hardening, resilience, and alignment to reference security standards.
• Provide assurance oversight and configuration governance for SaaS platforms, with emphasis on identity and privilege management, access control enforcement, and data confidentiality protection.
• Perform threat modelling and security design reviews to influence architectural decisions, support secure engineering principles, and shape remediation priorities
• Advance monitoring, detection, and response maturity across cloud and SaaS environments using platforms including Wiz, Zscaler, Sentinel, and complementary detection tooling.
• Engineer, tune, and maintain detection logic and security policy frameworks to improve telemetry quality, situational awareness, and incident readiness
• Conduct cloud security posture assessments and lead remediation of weaknesses identified through vulnerability scanning, configuration assessments, and security testing.
• Support operational incident response through investigation of security issues, risk containment activities, root cause analysis, and development of durable corrective actions.
• Promote DevSecOps methods by coaching engineering teams, developing reusable secure patterns, and enabling the adoption of automated control enforcement.
• Partner with the chief architecture, platform, and product functions to embed security within design processes and ensure alignment with strategic, regulatory, and business requirements.

Compliance, Audit & Governance

• Ensure compliance with cloud and SaaS-specifi