Senior Security Engineer, Infrastructure & Cloud Security

At Qualtrics, we create software the world’s best brands use to deliver exceptional frontline experiences, build high-performing teams, and design products people love. But we are more than a platform—we are the creators and stewards of the Experience Management category serving over 18K clients globally. Building a category takes grit, determination, and a disdain for convention—but most of all it requires close-knit, high-functioning teams with an unwavering dedication to serving our customers.

When you join one of our teams, you’ll be part of a nimble group that’s empowered to set aggressive goals and move fast to achieve them. Strategic risks are encouraged and complex problems are solved together, by passing the mic and iterating until the best solution comes to light. You won’t have to look to find growth opportunities—ready or not, they’ll find you. From retail to government to healthcare, we’re on a mission to bring humanity, connection, and empathy back to business. Join over 6,000 people across the globe who think that’s work worth doing.    

Senior Security Engineer, Infrastructure & Cloud Security

Why We Have This Role

As Qualtrics continues to expand the Experience Management (XM) SaaS platform, we must ensure that we’re protecting our customers and their data by building and operating secure systems. With over one thousand software & system engineers contributing to Qualtrics XM every day, we have a large attack surface to evaluate and secure. This role is critical to this mission.

Qualtrics is seeking an experienced security engineer/architect with a passion for security and demonstrated expertise in cloud and infrastructure security. The selected candidate will provide technical leadership and subject matter expertise within the Infrastructure Security team and across the product engineering organization.

The Infrastructure Security team is responsible for measures to improve and ensure the security of infrastructure used to operate and deliver Qualtrics SaaS products. The team’s scope includes cloud (IaaS/PaaS), workload orchestration (Kubernetes, Nomad), containers, data stores and server OS, as well as CI/CD and related systems. Infrastructure Security works in collaboration with other teams within the Information Security organization, including application security, vulnerability management, network security, security operations and incident response, and security assurance. The team also partners with our infrastructure (i.e., SRE) and platform engineering and developer experience teams. 

How You’ll Find Success

• You will define infrastructure and cloud security program strategy and architecture, identify and remediate risks, recommend and drive specific improvements
• Collaborate effectively with the Qualtrics engineering organization and fellow security team members; socialize security risks, solutions and and architecture
• Mentor and support a team of skilled security engineers to help them 

How You’ll Grow

• Solve challenging security, technical and process challenges which require creative thinking and continuous learning
• Learn new technologies, cloud platforms/services and other infrastructure being introduced regularly within the organization in order to provide accurate and comprehensive security guidance
• Develop and exercise project management and leadership skills to execute on the program roadmap

Things You’ll Do

• Review system designs and implementations, and consult with engineers across the organization to identify and/or avoid security issues through alignment with security standards and best practices; document and ensure security issues are appropriately remediated
• Leverage your accumulated subject matter expertise of Qualtrics systems and infrastructure to propose design patterns and drive architectural improvements which address classes of security flaws in the platform
• Develop and implement the cloud & infrastructure security architecture and contribute to program strategy and roadmap plans
• Document and improve cloud/infrastructure standards and guidelines
• Promote DevSecOps principles and implement Infrastructure as Code (IaC) scanning and policy enforcement to ensure new systems deployed via Terraform, AWS CloudFormation, Code Development Kit or similar methods are secure and compliant with standards and guidelines
• Deliver training and provide mentoring to engineers and staff on security topics
• Perform the selection, design, development, implementation and management of automated security testing tools (e.g., cloud security posture management (CSPM), network/