Quanata

Quanata

Quanata is an insurance technology (InsurTech) company based in San Francisco, California. Founded in 2015 and wholly owned by State Farm, Quanata focuses on context-based risk prediction and mitigation solutions using AI and real-time telematics. The company employs a team of approximately 201–500 professionals, including data scientists, actuaries, and engineers, many of whom come from leading Silicon Valley firms. The core mission of Quanata is to enhance the insurance industry with AI-assisted modeling capabilities. Their cloud-native platform supports dynamic risk scoring, fraud detection, and claims optimization. Key offerings include AI-assisted risk modeling, real-time telematics for monitoring driving behavior, and risk-based acquisition innovations. Quanata also provides technical consulting and advisory services to help insurance organizations modernize their operations. Their flagship product, the Quanata platform, serves a variety of applications from risk modeling to customer engagement, catering to both large insurance carriers and innovative insurtech companies.

information technology & services
201-500

Description

  • Embed security into AI-enabled products, applications, APIs, services, and platforms throughout their lifecycles.
  • Lead threat modeling, architecture reviews, security design reviews, and risk assessments for LLM, RAG, agentic AI, MCP, and third-party systems.
  • Define secure AI engineering patterns, guardrails, standards, and reference architectures.
  • Strengthen AWS infrastructure, CI/CD pipelines, infrastructure-as-code, containers, secrets management, identity, and software supply chain controls.
  • Improve AI-related detection, observability, telemetry, incident response, and operational readiness.
  • Evaluate AI tools, SaaS platforms, model providers, integrations, and developer technologies for security, privacy, access, and operational risks.
  • Develop security guidance, training, and enablement materials for engineering and business teams.
  • Lead cross-functional security-by-design initiatives and critical security projects from strategy through implementation.

Requirements

  • Bachelor’s degree in a relevant technical field or equivalent relevant experience.
  • 8+ years of experience in application, product, cloud, infrastructure, DevSecOps, or software security.
  • 5+ years of hands-on experience securing, assessing, building, integrating, or operating AI, ML, LLM, GenAI, or AI-enabled systems.
  • Experience with security architecture reviews, threat modeling, secure design and code reviews, and risk assessments.
  • Experience securing third-party SaaS platforms, AI tools, model providers, APIs, integrations, and vendor-managed services.
  • Strong AWS and cloud-native security experience, including IAM, networking, logging, monitoring, secrets, workload identity, and infrastructure-as-code.
  • Strong knowledge of CI/CD, containers, deployment automation, artifact management, and software supply chain risks.
  • Understanding of AI security risks such as prompt injection, data leakage, insecure tool use, excessive agency, RAG risks, model abuse, and AI supply chain concerns.
  • Ability to translate security risks into engineering requirements, controls, standards, detections, and procedures.
  • Preferred experience with agentic AI, AWS AI/ML services, RAG systems, security tooling, Python or similar languages, Kubernetes, Terraform, and relevant security frameworks or certifications.

Benefits

  • Salary range of $290,000–$400,000.
  • Medical, dental, vision, life insurance, supplemental income plans, 401(k) with company match, Headspace subscription, and monthly wellness allowance.
  • Remote-first work across the U.S., excluding territories, with optional occasional travel and access to offices in the San Francisco Bay Area and Providence, Rhode Island.
  • $2,000 one-time home office equipment allowance and a company-provided MacBook Pro.
  • Four weeks of PTO in the first year and 12 weeks of fully paid parental leave.
  • Up to $5,000 annually for professional development, plus LinkedIn Learning and BetterUp coaching access.
  • Core collaboration hours from 9 AM to 2 PM Pacific Time.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Analista de Seguridad de Aplicaciones Mid

Coforge 10K-50K IT Services

Coforge busca un Analista Mid de Seguridad de Aplicaciones para analizar y fortalecer la seguridad de APIs, aplicaciones web y código durante el ciclo de desarrollo de software, en modalidad remota desde Lima, Perú.

Azure Git GitHub
3 hours, 42 minutes ago

Security Engineer II, Application Security

Trail of Bits 51-250 Internet Software & Services

Trail of Bits is hiring a remote U.S.-based Security Engineer II to conduct hands-on application security assessments, discover and validate vulnerabilities, build custom tooling, and deliver actionable findings to clients.

Ansible C C++ Cybersecurity Go Helm JavaScript Kubernetes Python Rust Terraform TypeScript
4 hours, 12 minutes ago

Senior Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a security engineer to embed secure software supply chain practices into CI/CD and cloud-native product development, reducing risk across its Kubernetes, cloud, and open source software stack.

AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
6 days, 4 hours ago

Product Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is hiring a Security Engineer to partner with engineering and product teams remotely, building secure-by-default systems and driving measurable application security outcomes.

AWS Docker GCP Go Java Kubernetes Python Ruby Terraform
1 week, 5 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers