Security Engineer

About the role

Qdrant is seeking a Mid‑Level Security Engineer to own hands‑on engineering and operational work within its security program. Embedded in the Cloud Engineering team, you will work closely with the Security Officer to identify risks, set priorities, and drive remediation across product and engineering.

Key responsibilities

• Run the public bug bounty program: triage, reproduce, validate findings and drive remediation to closure.
• Investigate reported vulnerabilities in Rust, Go and Python codebases.
• Provide security tooling, defaults, documentation and guidance to make secure development the easy path.
• Partner with engineering teams to design, review and verify fixes, setting clear security requirements where needed.
• Harden GitHub security posture: secret scanning, branch protection, dependency alerts and code scanning.
• Monitor and respond to security alerts across AWS, Kubernetes, CI/CD and related infrastructure.
• Track and report security metrics such as remediation SLAs, MTTR and patch latency.
• Build automation and guardrails: CI/CD security checks, policy‑as‑code, GitHub automation and cloud security controls.

Required profile

• Ability to navigate unfamiliar Rust, Go or Python codebases to validate vulnerability reports.
• Experience triaging vulnerability reports or working with bug bounty / product security programs.
• Practical knowledge of cloud and container security, especially AWS and Kubernetes.
• Familiarity with GitHub security features and securing CI/CD pipelines.
• Self‑directed, comfortable managing a security queue independently.
• 3+ years in a hands‑on security engineering, product security or vulnerability management role.

Required skills

• Rust
• Go
• Python
• AWS
• Kubernetes
• GitHub security features
• CI/CD pipeline security
• Security automation and policy‑as‑code

What we offer

• Remote‑first, international team working on cutting‑edge AI infrastructure.
• Competitive salary with additional perks and flexible working hours.
• High ownership, real impact and open‑source, engineering‑driven culture.
• Choice of laptop equipment and comprehensive US benefits for full‑time employees.