The Role
Own cloud, corporate IT, identity, endpoint, monitoring, incident response, and compliance security. Harden AWS, GCP, or Azure environments; manage IAM, networking, secrets, logging, configuration baselines, SSO, MFA, RBAC, and MDM. Partner with engineering on secure development, vulnerability remediation, and infrastructure-as-code security. Implement SOC 2 and ISO 27001 controls, collect audit evidence, support vendor assessments, and deliver security awareness training.
Summary Generated by Built In
About Quin
Why this role exists
What you'll own
Quin is a safety-technology company. We embed sensor tech — crash detection, motion sensing, connectivity — into helmets and protective gear as an ingredient brand, shipping inside products from partners across motorcycling, cycling, sports, Industrial PPE and more. Quin products are designed to scale to millions of users, adopted by leading, global brands. Our engineering and product operations centre is in Hyderabad, where we are building our team and product with world-class excellence.
This is the role focussed on ensuring our systems are secure and our security posture is not only well documented, but proudly advertised.
This role is a technical lead of our compliance engine.
Corporate IT & identity
- Identity as the backbone: SSO, MFA, least-privilege access, and clean joiner/mover/leaver flows across all locations.
- SaaS administration and access governance across our tool estate.
Cloud & product security
- Harden our cloud environment (network, secrets, key management, logging, config baselines) as the portal scales to millions of users.
- Partner with engineering on secure SDLC: dependency and vulnerability management, security review of new services, and remediation tracking.
Endpoint & device
- MDM across the fleet, disk encryption, patch baselines, and a sane BYOD/company-device policy.
Security monitoring & incident response
- Centralised logging/alerting, a workable detection baseline, and an incident-response runbook.
Compliance evidence & controls
- Implement and operate the technical controls behind SOC 2 and ISO 27001, and own continuous evidence collection so audits are boring.
- Feed vendor/third-party security assessments.
Security awareness
- Lightweight, useful security training and phishing resilience for the team.
- 3–6 years in security engineering, cloud security, or IT/infrastructure with a strong security lean.
- Hands-on cloud security on at least one hyperscaler (AWS, GCP or Azure): IAM, networking, secrets/key management, logging, config hardening.
- Solid identity & access fundamentals (SSO/SAML/OIDC, MFA, RBAC) and endpoint management (MDM).
- Working understanding of SOC 2 and/or ISO 27001 controls — you've supplied evidence for an audit, or you can clearly show you know what one demands.
- Comfortable scripting/automating (Python/Bash) and reading infrastructure-as-code.
- Autonomous and pragmatic: you secure things without becoming the department of "no."
- AWS Security Specialty, AZ-500, CCSP, CISSP, or ISO 27001 Lead Implementer.
- Infrastructure-as-code security (Terraform + Checkov/tfsec) and SIEM experience.
- Prior security work at a product SaaS with an enterprise buyer base.
- AI/LLM security exposure (prompt-injection defence, model/endpoint hardening) — relevant as we run ML on motion data.
- Having stood something up from scratch in a small, scrappy team.
Small team of doers. We hire people who move faster and go deep, not people who manage others to do the work. You'll have real ownership of security and IT posture and very little bureaucracy.
Skills Required
- 3–6 years of experience in security engineering, cloud security, or IT/infrastructure with a strong security focus
- Hands-on cloud security experience with AWS, GCP, or Azure, including IAM, networking, secrets/key management, logging, and configuration hardening
- Understanding of identity and access fundamentals including SSO, SAML, OIDC, MFA, and RBAC
- Experience with endpoint management and MDM
- Working knowledge of SOC 2 and/or ISO 27001 controls and audit evidence requirements
- Ability to script and automate using Python or Bash
- Ability to read infrastructure-as-code
- AWS Security Specialty, AZ-500, CCSP, CISSP, or ISO 27001 Lead Implementer certification
- Infrastructure-as-code security experience with Terraform and Checkov or tfsec
- SIEM experience
- Prior security experience at a product SaaS company with an enterprise buyer base
- AI/LLM security exposure, including prompt-injection defense or model/endpoint hardening
- Experience building security capabilities from scratch in a small team
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Quin (Quintessential Design) develops connected safety technology for helmets and other protective equipment. Its sensor systems analyze motion to detect impacts and dangerous events, then can alert emergency contacts or professional monitoring services and share relevant location and incident data. Its products combine helmet-compatible sensors, emergency-response features, and performance analytics to help users improve safety and receive assistance more quickly.
.jpeg)
