Senior Security Engineer

About the role

Qutwo, a European AI lab for the quantum era, is looking for a Senior Security Engineer in Helsinki. As the hands-on owner of security across the company's engineering and infrastructure, you will work closely with the infrastructure and engineering teams to design, build and run the controls that keep the platforms secure, and lead the technical side of certification and compliance work as the company grows.

Key responsibilities

• Network security: design, configure and maintain firewalls, VPNs, network segmentation and IDS/IPS.
• Host hardening: harden Linux systems with SELinux and/or AppArmor and secure baseline configurations.
• Identity and access: implement and maintain AAA, IAM and access controls across infrastructure and cloud environments.
• Security monitoring: deploy and operate SIEM and logging tools, build detections and alerts, and investigate security events.
• Vulnerability management: run scanning, patching and remediation across infrastructure.
• Incident response: lead technical investigations and remediation, and help build the incident response framework.
• Automation: use infrastructure-as-code and scripting to keep configurations consistent, repeatable and auditable.
• Certification and compliance: implement and evidence controls for ISO 27001 and SOC 2, support gap analyses and audits, and help meet GDPR, NIS2 and the EU AI Act.
• Security governance and risk: help shape policies, standards and the risk register, and carry out risk assessments and vendor security reviews.
• Collaborate with infrastructure, engineering and IT teams, setting and verifying security requirements.

Required profile

• At least 6 years of hands-on experience in network security, security operations or infrastructure security.
• A methodical, secure-by-design approach and the ability to work closely with infrastructure and engineering teams.
• Experience supporting or delivering formal certifications such as ISO 27001 or SOC 2, and a working knowledge of GDPR and European regulatory frameworks.
• Plus: experience securing GPU, HPC or research computing environments; Kubernetes and container security; EU AI Act compliance; and defence or government security environments.

Required skills

• Strong practical experience with firewalls, VPNs, IDS/IPS and network segmentation.
• Deep Linux knowledge, including hardening with SELinux and/or AppArmor.
• Experience deploying and operating SIEM, IAM and AAA solutions.
• Cloud security experience (GCP, AWS or Azure).
• Scripting and automation (e.g. Python, Bash) and infrastructure-as-code tools such as Terraform or Ansible.