Senior Information Security Engineer

Qualia is a leading B2B real estate technology company that aims to simplify the home buying and selling process. They are seeking a Senior Information Security Engineer to enhance their security posture by identifying vulnerabilities, building security tools, and collaborating with various stakeholders to ensure robust security measures are in place.

Responsibilities:

• Partner with stakeholders across the business to identify gaps and strengthen Qualia's security posture
• Uncover security weaknesses in technologies and processes through threat modeling, security assessments, and the development of practical security baselines
• Build and operate tooling across the full security lifecycle: prevention, detection, investigation, and response
• Evaluate the security posture of cloud environments, including reviewing configurations, monitoring for drift, and ensuring alignment with organizational security baselines
• Serve as a point of escalation for customer-reported security concerns, triaging issues, communicating clearly with affected parties, and driving issues to resolution
• Triage and reproduce vulnerability findings from penetration tests, internal tooling, and external reports—and communicate associated risk clearly to the right audiences
• Scale security impact through automation and education, making the whole organization more security-aware

Requirements:

• 4+ years of professional information security experience, with both a strong defensive foundation and familiarity with offensive techniques
• Genuine curiosity about how systems work and how they break
• The ability to write code—whether it's a quick automation script or a more substantial detection tool
• Hands-on experience with: Security operations tooling (e.g., SIEMs, IDS/IPS, WAFs, log monitoring platforms)
• Core IT domains, including endpoint management, networking, web applications, and cloud infrastructure
• Identity and access management concepts (e.g., SSO, MFA, role-based access controls)
• Navigating the security implications of emerging technologies—including AI and large language models—as the company evaluates and adopts new tools
• Security automation and orchestration: experience connecting tools, writing integrations, or building workflows that reduce response times and manual effort
• Penetration testing tools (e.g., Nmap, Nessus, Metasploit, Burp Suite, or similar)
• The ability to translate complex security concepts into clear, actionable language for technical and non-technical audiences alike
• Bachelor's degree in a relevant field, or equivalent practical experience
• Information Security or IT certifications are a plus
• Experience with or exposure to compliance frameworks (e.g., SOC 2, ISO 27001, or similar)
• Information Security Certificates (e.g., CISSP, GIAC, or similar)