Implement AI-enabled SOC automation and investigation capabilities, including signal enrichment, workflow orchestration, and analyst tooling. Develop and operate the security tooling, data integrations, dashboards, and supporting platforms required for reliable day-to-day security operations. Tune detections and investigation workflows to improve signal quality, reduce false positives, shorten investigation time, and increase analyst productivity. Participate in incident investigation and response, maintain operational readiness, and troubleshoot security issues affecting network, infrastructure, and physical security services. Partner with engineering, facilities, networking, and security teams to automate manual processes, resolve operational issues, and strengthen end-to-end resilience. Embody our Culture and Values Doctorate in Statistics, Mathematics, Computer Science, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response Doctorate in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 8+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR equivalent experience. CISSP CISA CISM SANS OSCP Security 2+ years of experience programming in C++/C# or Python or Scala or similar technologies. Demonstrated experience coordinating incidents and supporting live services, including investigation, containment, recovery, escalation, triage, root-cause analysis, stakeholder communication, and operational readiness. Hands-on experience with security automation and AI-assisted operational workflows using PowerShell, Python, Logic Apps, or similar technologies for signal enrichment, investigations, workflow orchestration, and decision support. Working knowledge of enterprise networking, including DNS, TCP/IP, firewalls, routing, VPNs, and network troubleshooting. Experience working with SOC, NOC. Experience collaborating with corporate insider threat, investigations, legal, or trade compliance functions; exposure to dedicated insider threat platforms such as Purview, DTEX, Proofpoint ITM, Magnet Axiom, or Forcepoint. Experience designing, deploying, or evaluating agentic AI or LLM-based automation in a security operations context. Experience or interest in the specific challenges of protecting strategic research programs from sustained external targeting; familiarity with export control (EAR / ITAR) and government program environments.
QUANTUM ROLE CONTEXT | Appended by Quantum.Jobs v2
Role context:
This role exists to design, automate, and operate security tooling and incident investigation workflows across enterprise infrastructure. Positioned at the intersection of security operations, software engineering, and system administration, the function provides central operational support for threat detection and resilience. Security engineers build automated investigation platforms and tune analytical models, bridging security operations center analysts, networking teams, and engineering departments to protect digital assets, maintain operational readiness, and safeguard infrastructure against persistent external targeting and compliance vulnerabilities.
Quantum ecosystem relevance:
While primarily an enterprise security role, this position provides essential protective infrastructure for organizations conducting advanced scientific research. As quantum computing and strategic technology programs face targeted intelligence threats, robust operational security serves as an indirect enabling capability. By safeguarding proprietary software pipelines, network environments, and intellectual property from unauthorized access or exfiltration, security development engineering protects underlying research programs and hardware development environments from external operational disruptions and compliance compromise.
Capability signals:
- Engineering automated security operations workflows and artificial intelligence investigation tooling
- Implementation of enterprise threat detection tuning and signal enrichment mechanisms
- Management of Security Operations Center incident response and live service containment
- Protection of specialized research infrastructure against sustained external targeting threats
- Cross-functional collaboration with trade compliance, legal, and network engineering teams
