Security Officer (Remote, Europe) at Qdrant

Europe

<p>At Qdrant, security is not just a checkbox; it is a core feature of our high-performance vector database. As our Security Officer, you will be the strategic lead and technical executor of our security posture. You will bridge the gap between high-level compliance (SOC 2, GDPR, HIPAA, …) and deep-tier engineering. Your mission is to further evolve and scale our security culture with the existing "Security Champions" program while remaining hands-on with architectural risk assessments and Cloud infrastructure hardening. You aren't just managing a backlog — you are building the foundation that allows Qdrant to scale safely.</p> <p><strong>Location</strong></p> <p>This role is <strong>remote and open to candidates located in Europe.</strong></p> <p>Candidates must demonstrate a mastery of European regulatory landscapes; this geographical preference is based on the technical requirements of the role rather than citizenship.</p> <h2 id="tasks">Tasks</h2> <ul> <li><strong>Backlog &amp; Strategy:</strong> Own and prioritise the Security Backlog, translating high-level threats and compliance needs into actionable engineering requirements for the development teams.</li> <li><strong>Security Champions Program:</strong> Lead and evolve our existing Security Champions initiative, mentoring engineers to perform internal security reviews and ensuring security is a distributed responsibility rather than a bottleneck.</li> <li><strong>Architectural Risk Management:</strong> Conduct formal Architectural Risk Assessments on critical components (e.g., Cloud RBAC, JWT, Inference) to ensure security is "baked-in" during the design phase of the SDLC.</li> <li><strong>Compliance &amp; Audits:</strong> Maintain our "always-audit-ready" status using Drata and HeyData. You will oversee annual SOC 2 audits, GDPR requirements, and drive our OWASP SAMM roadmap toward a maturity score of 1.0.</li> <li><strong>Multi-Cloud Security Governance:</strong> Oversee security posture management across AWS, GCP, and Azure; leading technical compliance audits and implementing automated identity and access management (IAM) to ensure infrastructure resilience.</li> <li><strong>Vulnerability Management &amp; Pentesting:</strong> Manage the bi-annual penetration testing lifecycle, coordinate with external security researchers (Bug Bounty Program), and ensure timely remediation of findings in coordination with the development teams.</li> <li><strong>Sales &amp; Growth Support:</strong> Act as the subject matter expert for customers, completing detailed security questionnaires and ensuring our marketing vendor ecosystem remains compliant.</li> </ul> <h2 id="requirements">Requirements</h2> <p><strong>Must-have</strong></p> <ul> <li><strong>Experience:</strong> 5+ years in Security Engineering, DevSecOps, or as a Security Officer in a cloud-native SaaS environment.</li> <li><strong>Cloud Proficiency:</strong> Technical knowledge of AWS, GCP, Azure (IAM, Multi-AZ architectures, Trusted Advisor, etc.).</li> <li><strong>Regulatory &amp; Policy Fluency:</strong> Practical experience maintaining SOC 2 Type II, HIPAA, and GDPR. You can architect a unified security policy framework that satisfies multiple compliance standards simultaneously, reducing operational overhead for the engineering team.</li> <li><strong>Risk Assessment Skills:</strong> Ability to perform threat modeling and architectural risk classification on complex distributed systems.</li> <li><strong>Communication:</strong> Strong stakeholder management skills; you can advocate for security resources during quarterly capacity planning and explain P0 risks to leadership.</li> <li><strong>Self-Starter:</strong> The ability to move from "reading the exact policy" to "investigating the code" to provide an informed response to technical queries.</li> </ul> <p><strong>Nice-to-have</strong></p> <ul> <li>Familiarity with the <strong>OWASP SAMM</strong> framework.</li> <li>Experience using automated compliance tools like <strong>Drata</strong> or Vanta.</li> <li>Background in <strong>Rust</strong> or high-performance database environments.</li> <li>Professional certifications such as CISSP, CISA, or CCSP (Certified Cloud Security Professional), or advanced security-focused certifications from major cloud providers (e.g., AWS Certified Security – Specialty, Azure Security Engineer, or Google Professional Cloud Security Engineer).</li> <li>Experience navigating the AWS Foundational Technical Review (FTR).</li> </ul> <h2 id="benefits">Benefits</h2> <ul> <li>Competitive salary, equity, and benefits</li> <li>Fully remote setup with flexible working hours</li> <li>Clear ownership of reliability and operational excellence</li> <li>Opportunity to work on mission-critical customer-facing infrastructure</li> <li>Strong collaboration with platform and engineering teams</li> </ul> <p>If you enjoy de-risking complex cloud architectures and scaling security through a culture of shared responsibility and technical rigor, we’d love to hear from you.</p>