What are the responsibilities and job description for the Lead Security Operations Engineer position at Quartermaster?
About Us
At Quartermaster AI, we believe the ocean should be a safe and sustainably managed resource for all. By leveraging cutting-edge AI and robotics, we unlock capabilities that were recently impossible. Our distributed open-ocean systems enable every vessel to sense, compute, and communicate, enhancing maritime domain awareness for those who need it most. Our systems operate in contested environments where reliability and security are non-negotiable.
Job Description
As our Lead Security Operations Engineer, you will own the full spectrum of security operations, from detection and incident response to infrastructure hardening and vulnerability management. This is a builder’s role; you will architect and automate the defensive security stack that protects our cloud environments, development pipelines, and edge-deployed maritime systems. You will work closely with Engineering and GRC teams to ensure our security posture is operationally excellent, resilient against sophisticated threats, and compliance-ready.
Key Responsibilities
At Quartermaster AI, we believe the ocean should be a safe and sustainably managed resource for all. By leveraging cutting-edge AI and robotics, we unlock capabilities that were recently impossible. Our distributed open-ocean systems enable every vessel to sense, compute, and communicate, enhancing maritime domain awareness for those who need it most. Our systems operate in contested environments where reliability and security are non-negotiable.
Job Description
As our Lead Security Operations Engineer, you will own the full spectrum of security operations, from detection and incident response to infrastructure hardening and vulnerability management. This is a builder’s role; you will architect and automate the defensive security stack that protects our cloud environments, development pipelines, and edge-deployed maritime systems. You will work closely with Engineering and GRC teams to ensure our security posture is operationally excellent, resilient against sophisticated threats, and compliance-ready.
Key Responsibilities
- SecOps Leadership: 8 years of experience in security operations and detection engineering, with a proven track record of architecting and defending infrastructure within startups in the defense industry.
- Defensive Architecture: Expert-level experience building and automating security monitoring stacks, including SIEM/SOAR platforms (Splunk, Elastic, Sentinel), EDR, and cloud-native security tooling.
- Incident & Threat Management: Proven ability to lead end-to-end incident response, proactive threat hunting, and full-spectrum vulnerability management across AWS, Azure, or GCP environments.
- Automation & Hardening: Proficiency in Python or Bash for security orchestration and experience implementing hardening standards for CI/CD pipelines, container environments (Kubernetes), and edge-deployed systems.
- Mission Compliance: Strong ability to align security operations with NIST 800-171 and CMMC frameworks, translating operational metrics into executive-level reporting and strategic guidance.
- Core Requirements: U.S. citizenship with the ability to maintain a security clearance; Bachelor’s degree in CS, Cybersecurity, or equivalent technical experience.
- Technical Mastery: Deep hands-on experience with SIEM platforms, security automation, and cloud security (IAM, network security, and cloud-native monitoring).
- Advanced Skills: Preferred certifications such as GIAC (GCIH, GCIA), OSCP, CISSP, or AWS/Azure Security specialties.
- Industry Background: Experience with red/purple team exercises, adversary emulation (MITRE ATT&CK), and operating in critical infrastructure or defense environments.
- Competitive salary and high-upside equity package.
- Flexible work hours and hybrid/remote work options.
- Comprehensive medical, dental, and vision benefits.
- The opportunity to build a security organization from the ground up for mission-critical maritime defense technology.