Senior Security Engineer

Company Description

QAD is building a world-class SaaS company, and we are growing. We are looking for talented individuals who want to join us on our mission to help solve relevant real-world problems in manufacturing and the supply chain.

We are a virtual first company and your primary work experience will be virtual / working from your home.  Occasional travel to a physical office may be required to enhance working relationships, collaboration, design, strategy and alignment. 

Job Description

As a Senior Security Engineer, reporting to the Deputy CISO, you will take a leading role in safeguarding our organization’s infrastructure, applications, and data by implementing industry-leading security practices. You will design, oversee, and optimize security controls while working cross-functionally with other teams to ensure a robust and continuously improving security posture with an emphasis around vulnerability management.

What you will do:

• Vulnerability Identification: Implement and manage tools (e.g., Nessus, Qualys, OpenVAS, Rapid7, Wiz) to routinely scan for system and application vulnerabilities. Manage Network Penetration Tests through third-parties. Administer Attack Surface Management tooling. 
• Threat Assessment: Categorize vulnerabilities based on severity, likelihood, and potential business impact. Communicate findings with clear risk prioritization to stakeholders. 
• Reporting & Metrics: Generate regular reports to illustrate vulnerability trends, remediation progress, and critical risk areas. Present actionable insights to leadership
• Tool Integration: Integrate security tools into our pipelines, networks, and platforms
• Automation: Orchestrate security posture checks on all new infrastructure deployments and proactively scale security controls to new environments using low-code solutions. 
• Security Architecture: Proactively propose security improvements and recommendations based on risk and vulnerabilities. \
• Incident and Event Support: Engage with Security Operations team members with advanced threats and incidents. 

Qualifications

What you need:

• 7 plus years of overall experience, but at least 5+ Years in software development, IT administration, or hands-on technical role. 2+ years working with security teams. 
• Professional degree: Bachelor's degree in Computer Science, Computer Engineering, or related field or equivalent experience.
• At least one of the following certifications: CISSP, CEH, OSCP, OSCE, GSE, or GIAC.
• Excellent communication skills, with the ability to effectively communicate technical information to non-technical stakeholders.
• Strong analytical and problem-solving skills, with the ability to quickly assess and respond to security incidents.
• Ability to prioritize and manage multiple tasks in a fast-paced environment.

Technical skills: 

• Proficiency with common vulnerability scanning tools (e.g., Nessus, Qualys, OpenVAS, Wiz).
• Proficiency in working with RESTful APIs and integrating security or operational processes into low-code/no-code platforms (e.g., Rundeck, Ansible, Tines, SOAR platforms) to streamline and automate manual workflows.
• Proficient in identifying vulnerability classes, performing root cause analysis, defining remediation paths in code or systems, coordinating with engineers, and verifying fixes.
• Familiarity with cloud environments (AWS, Azure, or GCP) and best practices for cloud security.
• Expert in Microsoft Windows and Linux operating systems
• Experience with Infrastructure as Code (e.g., Terraform, Ansible) and containerization technologies (e.g., Docker, Kubernetes) is a plus.
• Extensive experience and knowledge of scripting languages.

Additional Information

• Your health and well being are important to us at QAD. We provide programs that help you strike a healthy work-life balance.
• Opportunity to join a growing business, launching into its next phase of expansion and transformation.
• Collaborative culture of smart and hard-working people who support one another to get the job done.
• An atmosphere of growth and opportunity, where idea-sharing is always prioritized over level or hierarchy.

About QAD:

QAD Inc. is a leading provider of adaptive, cloud-based enterprise software and services for global manufacturing companies. Global manufacturers face ever-increasing disruption caused by technology-driven innovation and changing consumer preferences. In order to survive and thrive, manufacturers must be able to innovate and change business models at unprecedented rates of speed. QAD calls these companies Adaptive Manufacturing Enterprises. QAD solutions help customers in the automotive, life sciences, packaging, consumer products, food and beverage, high tech and industrial manufacturing industries rapidly adapt to change and innovate for competitive advantage.

QAD is committed to ensuring that every employee feels they work in an environment that values their contributions, respects their unique perspectives and provides opportunities for growth regardless of background. QAD’s DEI program is driving higher levels of diversity, equity and inclusion so that employees can bring their whole self to work.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class. 

#LI-Remote