Senior Security Engineer

Join Qutwo - Europe's private Quantum AI Lab, on our quest to bridge the gap between the classical and the quantum world. We partner with the most advanced and forward-thinking customers, solving fundamental real-world problems, side by side. The best scientists and engineers in the world are drawn to one thing: a problem worthy of their ability. At Qutwo, we have one. We are a European AI lab for the quantum era, co-founded by pioneers behind IQM and Silo AI, with a team spanning MIT, UC Berkeley, Cambridge, and Carnegie Mellon, and backed by the founders of Skype, Hugging Face, Quantinuum, Supercell and many more. We work at the intersection of quantum computing, AI, optimization, and simulation — where the answers do not yet exist and the work genuinely matters. We are seeking Senior Security Engineer. If you are a humble learner, not afraid of the unknown, we encourage you to apply. Our main office is located in Helsinki, with established teams currently operating in Germany and Sweden. For the right candidate, we are fully open to discussing other remote or hybrid locations across Europe. Role Description As Senior Security Engineer, you will join our team in a full-time capacity, collaborating closely with our scientists and engineers across the organization. In this role, you will own security and compliance end-to-end across every part of Qutwo - building out the infrastructure, policy, and governance that keeps the company trustworthy as it scales, and leading our most sensitive systems through formal security accreditation. Accreditation Leadership: Lead formal security accreditation processes (e.g., ISO 27001, SOC 2, National/EU Defence clearances), managing gap analyses, control implementation, and regulatory audits. AI & GPU Infrastructure Security: Architect zero-trust policies, network segmentation, data encryption, and access controls tailored to GPU clusters, HPC environments, LLM pipelines, and quantum stacks. Regulatory Compliance: Ensure alignment with GDPR, NIS2, the EU AI Act, and emerging European AI governance mandates. Operations & Risk Management: Lead vendor risk assessments, incident response protocols, government security relations, and security budget allocation. End-to-End Governance: Design, implement, and own security roadmap, IT governance, and compliance framework from initial policies to audited execution. Qualifications Proven track record owning a security and compliance function end-to-end - as a Senior Security Engineer, or equivalent - including the transition from ground-zero policy to an accredited, audited program. 5+ years of professional experience in information security, IT governance, or regulatory compliance. You prioritize secure-by-design infrastructure, encryption, and risk management over one-off fixes. Hands-on experience leading organizations through formal security accreditation processes, including gap analysis, control implementation, and liaison with accrediting bodies and relevant stakeholders. Strong background in regulatory frameworks including GDPR and ISO 27001, with the judgment to build a compliance program rather than just administer one. Exceptional ability to lead cross-functional initiatives, translate organizational requirements into security roadmaps, and uphold high standards everywhere they apply - from engineering to delivery to how the company runs day to day. Experience managing government relations, vendor security reviews, and budget ownership for security and compliance programs. Experience in one or more of the following areas is a plus but not a requirement: Direct exposure to defence-sector contracting, clearances, or government security requirements. Active familiarity with the EU AI Act compliance and emerging European AI regulatory frameworks. Hands-on cloud infrastructure security experience (GCP, AWS, or Azure) alongside policy and governance work. Practical knowledge of GPU supercomputing security, model weight protection, and secure ML workloads.