Qu's mission is to deliver world class enterprise software to help restaurant chains thrive in the face of increasing complexity, opportunities, and challenges. Based in Rosslyn, VA, Qu is backed by leading Silicon Valley investors that have also backed Google, Uber, and Dropbox. We are building an Agile Security Operations team where you'll own the design and implementation of our threat detection and monitoring capabilities. This role offers an exciting opportunity for a security engineer who wants to take ownership of building comprehensive detection capabilities from the ground up, bridging the gap between security theory and operational reality. **What You'll Own** **AWS Security Architecture** * Design and implement security controls across our AWS environment including ECS/ECS\-Anywhere workloads * Own the configuration and optimization of AWS security services (GuardDuty, Security Hub, Config, CloudTrail) * Build and maintain secure network architecture with VPCs, security groups, and WAF configurations * Take ownership of encryption strategies using AWS KMS and secrets management **Threat Detection \& Response** * Develop custom GuardDuty detectors and behavioral analysis for our specific AWS/ECS environment * Build automated threat response workflows and incident response runbooks * Create threat hunting capabilities specific to cloud workloads and container environments * Integrate AWS security telemetry with our SIEM platform for comprehensive visibility **Container \& Serverless Security** * Secure our ECS and ECS\-Anywhere container deployments with runtime protection and monitoring * Implement container image scanning and vulnerability management workflows * Design security frameworks for Lambda functions and serverless architecture * Build security automation for container lifecycle management **Compliance \& Governance** * Ensure AWS environment meets SOC 2, PCI, and ISO compliance requirements * Implement automated compliance monitoring and drift detection * Design and maintain security baselines and configuration standards * Create compliance reporting and evidence collection automation **What You Bring** **Required AWS Expertise** * AWS Certification Required: Valid AWS Security Specialty, Solutions Architect Professional, or equivalent certification * Expired certifications acceptable with commitment to renew within first 4 months of employment * Certification verification required during interview process * 3\+ years of hands\-on AWS security experience with demonstrated expertise in security services * Deep knowledge of AWS IAM, VPC security, encryption services (KMS), and compliance tools * Experience securing containerized applications and serverless workloads in AWS **Technical Leadership** * Proven track record of designing and implementing AWS security architecture from scratch * Experience with Infrastructure as Code (CloudFormation, Terraform) for security automation * Strong knowledge of container security (ECS, Docker) and runtime protection * Proficiency in scripting (Python, PowerShell) for security automation and response **Ownership \& Innovation** * Experience building security controls that scale with rapid business growth * Strong problem\-solving mindset with bias for action and continuous improvement * Ability to work independently while collaborating effectively with DevOps and engineering teams * Customer\-focused approach to internal stakeholders and compliance requirements **Why Join Qu?** * **AWS Expertise Valued:** Your AWS certification and cloud security expertise will be central to our success * **Architecture Ownership:** Design and build cloud security architecture that supports millions of restaurant transactions * **Innovation Platform:** Work with cutting\-edge AWS services and emerging cloud security technologies * **Growth Opportunity:** Build security capabilities that scale from startup to enterprise as Qu grows * **Industry Impact:** Protect critical restaurant operations while enabling digital transformation Ready to own AWS security at Qu and help restaurants thrive securely in the cloud? Let's talk!