About Qualitate
Qualitate is building the AI-native primary intelligence platform for enterprises, investment firms, and asset managers. We automate the entire primary research workflow, from study design and expert recruitment through AI-moderated interviews and insight synthesis – replacing weeks of manual research with hours of high-signal output.
Expert research is a broken industry dominated by legacy incumbents with expensive, manual, and slow services. Investment and corporate strategy teams spend hundreds of hours coordinating intermediaries, scheduling expert calls, and synthesizing insights across fragmented providers. The process takes weeks to produce short-lived intelligence.
Qualitate transforms this workflow by autonomously conducting expert discussions at scale using AI. Qualitate’s AI Moderator interviews thousands of experts simultaneously each month, capturing forward-looking purchasing plans, competitive displacement, and real-time ROI signals. The platform turns these interviews into quantified, time-series outputs tracking over 10,000 public and private companies, queryable instantly in natural language. Our customers include some of the world’s largest enterprises, hedge funds, PE firms, credit investors, and venture capital firms.
The Role
Join Qualitate as our first dedicated security engineer. At 45 people, the security program you build is the one the company will scale on. You’ll harden our cloud environment, build logging, monitoring, and detection, remediate findings from penetration tests, and serve as the security reviewer on design docs for new features and architecture changes. You’ll also lead ISO 27001 from start to finish: scoping, risk assessment, implementing controls, and getting us through the certification audit, with evidence collection automated instead of tracked in spreadsheets. This is a high-ownership role. You’ll be a part of our founding engineering team to define our security architecture and roadmap, and you’ll write and ship production code, not just review it.
Our customers are hedge funds, PE firms, and large enterprises with demanding security requirements, so the systems you secure and the certifications you earn directly shape how fast we grow. The problems are specific to our platform: protecting confidential expert interviews and customer research, securing an AI system that runs thousands of interviews a month, and reaching ISO 27001 without slowing engineering down. You’ll report to our CTO, lead our response when something goes wrong, and partner with our VP of Compliance and Legal on policy, customer security reviews, and our broader compliance program. We’re looking for someone with 4+ years of security engineering experience, including hands-on compliance work, who thrives in fast-moving environments where the surface area is wide and the team is lean.
Who This Role Is For
- 4+ years of experience in security engineering. Ideally some of it at a startup or high-growth SaaS company where you secured cloud infrastructure hands-on and also helped build a compliance program.
- Strong Cloud and infrastructure security skills. Experience securing AWS or GCP environments, including IAM, network security, logging and monitoring, secrets management, and encryption. You can read and write infrastructure-as-code.
- Penetration testing rigor. You can contribute to a production code base and address issues raised in a penetration test.
- ISO 27001 experience. You’ve helped take a company through ISO 27001 certification, including scoping the ISMS, running risk assessments, writing the Statement of Applicability, implementing controls, and managing the audit. SOC 2 Type II experience is a plus. [You’ve built the technical controls behind an ISO 27001 or SOC 2 Type II certification, such as access management, logging, vulnerability management, and encryption, and automated evidence collection rather than tracking it in spreadsheets. Familiarity with ISMS scoping, risk…