About the Company

Qumulo is the leading file data platform, providing unrivaled freedom, control, and real-time visibility for file data at petabyte scale. Fortune 500 companies, major film studios, and the largest research facilities in the world trust Qumulo to help them innovate with their mission-critical digital files. The Qumulo experience makes file data management simple with continuous new features and a single, easy to use solution in a customer’s data center or in the public cloud.

Qumulo has a collaborative culture with a strong focus on delivering value to our customers. We are looking for people with a diverse set of experiences to help us fulfill our vision. You can get to know a few of our engineers at https://qumulo.com/eng/.

About the Position

In this role you will protect our cloud deployed applications and services by building monitoring systems, doing least-privilege designs to limit the blast radius of compromises, scanning networks, and instrumenting servers and containers. The work involves software engineering, involving provisioning, orchestration, automation, and repeatability.

We are building out a dedicated security team at Qumulo, so as an early member of the team, you will additionally help define how security engineers work constructively with the rest of our growing organization. This is a great opportunity to have a large positive impact on the product development team and the products we create.

Most of our engineering team is based in Seattle, WA. We are open to remote employees who are willing to travel to Seattle every 6-12 weeks.

Responsibilities

As a member of our team, you will:

• Work with security stakeholders to architect, develop, and implement against a technical information security roadmap.
• Develop and implement a broad security awareness program for employees to mitigate phishing risks and increase reporting of anomalous activity.
• Design, architect, and implement defensive security controls across endpoints (MacOS, Windows), servers (Linux), and SAAS/self-hosted applications.
• Develop and deploy centralized logging and alerting infrastructure to proactively identify malicious threats.
• Collaborate with engineering teams to improve security for identity access and management (IAM), device management, and public cloud service providers (e.g. Amazon AWS, Microsoft Azure).
• Investigate and manage security events and incidents
• Build automated solutions to secure our cloud environments (production and corporate)  as we continue to scale (E.g., SSO, SSH, IAM, secrets management, vulnerability management)
• Build security monitoring and incident response solutions to improve our ability to detect and respond to dynamic security threats
• Develop tools that integrate security into systems and processes, enabling our employees to do their jobs better and more securely with minimal friction.
• Contribute to enhancing our security culture by working cross functionally to communicate security industry trends, developments and emerging threats including sharing insights with the wider team

Qualifications

• 1-2+ years of direct information security experience with deep exposure in protecting one or more operating system platforms, ideally Linux and/or Windows
• 2+ years security focused DevOps, SRE or equivalent experience securing and automating a modern cloud environment at scale, such as AWS, GCP, or Azure
• Strong knowledge of modern adversary tactics, techniques, and procedures.
• Ability to empathize and collaborate with colleagues, independently manage and run projects, and ruthlessly prioritize efforts for risk reduction.
• Experience with public cloud service providers (e.g. Amazon AWS, Microsoft Azure).
• Intermediate or better proficiency with a scripting language (e.g. Bash, Python, PowerShell, or similar).
• Proficiency with a variety of programming or scripting languages such as Python and configuration tools such as Ansible, Jenkins, CircleCI, Terraform, and CloudFormation
• Networking knowledge, including network security and segmentation
• Ability to communicate security concepts with a  wide variety of stakeholders (both technical and non-technical.
• US citizen living in the US

Key Benefits

• Partial remote options
• Excellent healthcare coverage
• Parental leave (8 weeks, 100% pay for non-birthing parents; 20 weeks, 100% pay for birthing parents)
• 401K investment plan
• Unlimited paid time off, strongly encouraged to take at least 3 weeks per year

Hiring Process

Candidates applying for this position can expect the hiring process to follow the order below. Candidates can be declined from the position at any stage in the process.

1. Candidates will be invited to take a work sample test through our extended security team, Latacora. Details will be provided. 
2. Next, candidates will be invited to two one-hour interviews with Qumulo team members who will work closely with the person who fills this position.
3. Finally, candidates will be invited to a one-hour interview with the internal hiring manager. 

Other Details

Qumulo is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, gender, religion, sex, sexual orientation, age, disability, military status, or national origin or any other characteristic protected under federal, state, or applicable local law.

Please note that employment at Qumulo is contingent upon completion of a satisfactory background check.

For more information on our Applicant and Employee Privacy Notice please click on the link below:

https://qumulo.com/applicant-employee-privacy-notice