Staff Security Engineer

IonQ is developing the world's most powerful full-stack quantum computer based on trapped-ion technology. We are pushing past the limits of classical physics and current supercomputing technology to unlock a new era of computing. Quantum computing has the potential to impact every area of human society for the better. IonQ’s computers will soon redefine industries like medicine, materials science, finance, artificial intelligence, machine learning, cryptography, and more. IonQ is at the forefront of this technological revolution. 

Quantum computing and security are intimately connected. One day, quantum computers will render RSA trivially crackable; today, protecting our cutting edge research is essential.

As a Staff Security Engineer, you’ll help with the technical implementation and automation aspects of our security program, which is built around standards like NIST 800-53. This is an opportunity for a hands-on, technical and code savvy security engineer with an emerging or existing interest in the next generation of computing to bring their diverse background and talents to bear in shaping the future of computing.

In the first three months, you’ll be helping to integrate information from different security tools, automate security configuration checks, automate evidence collection, help with security hardening and serve as a technical security subject matter expert in discussions around security in our quantum computer.

Responsibilities:

• Write python (or potentially rust or golang) code to connect to a variety of systems to collect and analyze data in support of security alerting, evidence collection and system hardening
• Follow secure software development practices while working in an agile team, helping to scope, plan, prioritize and complete work
• Write technical documentation including software documentation, memos and architecture diagrams
• Automate integrations with Github Actions or workflow based tools
• Assist with security hardening of cloud, on premise and quantum systems
• Improve our application security posture through collaboration with development teams and coaching them through findings from SAST, SCA and other tools
• Collaborate with both technical and non-technical teams, from legal, to engineering, to finance, to operations, to supply chain
• Develop and document processes supporting secure operations
• Assist with responding to incidents as they arise

The ideal candidate will have experience contributing to multiple simultaneous initiatives.  Every day you will learn and explore, applying what you already know to a new environment and new problem.  You will balance multiple activities with a keen eye for prioritizing for the biggest impact. You’ll strive for simplicity and demonstrate significant creativity and incisive judgment. You'll enjoy learning technical topics, working across multiple business streams, and be uniquely positioned to help us reach the next horizon in secure quantum computing.  You will take ownership of the outcome for the work you take on.

You’d be a good fit with:

• Bachelor’s degree in Computer Science or equivalent practical experience — untraditional backgrounds are welcome and encouraged!
• 8+ years of relevant experience
• Experience writing python code that is used and maintained over time by a team
• Experience building and using Docker containers
• Experience with NIST 800-53 or NIST 800-171
• Experience with CIS Benchmarks and/or DISA STIGs
• Technical experience in systems administration, software engineering, digital forensics, security engineering and/or privacy engineering
• Excitement to learn and get things done right
• Empathy for your internal and external customers and excellent communication skills, since you’ll be working with folks of all backgrounds — technical and non-technical alike!

You’d be a great fit with:

• Masters or PhD degree in security, computer science or related
• Proven ability to lead security initiatives
• Prior experience with NIST 800-53 and NIST 800-171 audits
• Experience with FedRAMP and Federal agencies
• Experience with application security and tooling such as SAST and SCA
• Experience with integrating log data sources to monitoring tools (SIEM)
• Experience with infrastructure as code such as Terraform
• Experience with Chef, Puppet, Ansible or some sort of configuration management system
• Experience extracting and reporting on software bill of materials across a fleet of heterogeneous systems
• 3+ years of experience with incident or emergency response coordination

Location:

You will be our first dedicated security engineer! This position can be located at our newest office in Bothell, WA (just outside Seattle) or at our headquarters in College Park, MD. Our headquarters are located down the street from the University of Maryland. Our office is bright and open and a fun, collaborative environment, where we value each other’s unique qualities. IonQ is a five-minute walk to the Metro, which takes just twenty minutes to get to Washington, DC.

IonQ reflects the globally diverse audience that our products and technology serve. We believe that in addition to hiring the best talent, a diversity of perspectives, ideas, and cultures leads to the creation of better products and services. We hire people with a broad set of skills who are ready to take on some of humanity’s greatest challenges and make an impact on millions, if not billions, of users.

Ability to meet IonQ and customer security screening requirements are required for this role. These requirements include, but are not limited to passing a background check.

If this sounds like a good fit for you, we encourage you to apply.

The approximate salary range for this position is $175,954 – $230,369.