At Qush, we started with the people. A small core group of engineers got together to find an industry where we could merge innovation, passion, and simplicity to help people reach their greatest potential. Our attention was drawn towards the world of security—indispensable to modern work, yet often overlooked and taken for granted. Organisations needed the tools to understand if something was happening in real-time to keep their people safe and their data protected.

We started Qush in 2016. Six years later, we’re still creating a better, smarter way to deliver security. We protect people and data anywhere, and innovative companies worldwide use Qush for human-centric data loss protection. To apply for this great opportunity, click on the below

link

About this position

You would join as a core member of our PSIRT and Product Security teams, assisting with security aspects of the products Qush delivers from Design, Implementation and Delivery. This would include helping to improve our Secure Software Development Lifecycle and helping meet our ISO27001 goals.

This may take the form of consulting with vendors of third-party security tools or building our own bespoke security tools to assist and automate pre existing security processes. You’ll be hands-on with the development team helping guide threat modelling of new features, and helping ensure necessary testing is in place from a security standpoint. You’ll have direct input into the project, helping to raise new security related feature requests and implement new ideas by contributing to multiple code bases.

You will work closely with external, internal, customer and third party security teams and pentesters to help ensure the security of our products. This will include running internal red team / pentesting activities and improving security-focused testing during development.

When problems are found, you’ll be helping to drive the pre-existing Incident Response process to help get fixes in place in line with our response targets. You’ll be helping to find and fix issues with the members of the PSIRT team from within the development organisation who have been doing this for several years (with the freedom to implement your own fixes if you wish). We are transparent about our security issues and plan to remain this way. Where patterns emerge you’ll be suggesting new approaches, tools and conducting post-mortems to avoid similar failures in the future, as part of our process of continuous improvement.

You will be part of a growing team of dedicated product security engineers in a supportive environment to help implement new security tools and processes.

About you

You’re not expected to have all of the following skills, but they will be useful in performing your job.

We are looking for someone who:

1. Has an understanding of how data is protected at rest and in transit, including the particulars of TLS, PKI, encryption, key management, identity management and RBAC.
2. Is enthusiastic about writing threat models.
3. Understands REST APIs
4. Understands Linux and Docker
5. Has a passion for security
6. Can demonstrate outstanding technical ability or has achieved excellent academic results from a recognised university.
7. Is proficient in English

At Qush Security, we default to programming using Go, but also use a wide variety of different languages and frameworks. It’s not expected that you would be familiar with Go but you should be enthusiastic and willing to learn new things with some previous experience in some programming language

It is also considered a bonus if you have:

1. Familiarity with common problems found in software development – and mitigations in different circumstances. Think OWASP Top Ten.
2. Knowledge of securing a cloud environment, including Kubernetes. Experience specifically with Google Cloud and GKE is a plus.
3. Understanding of security testing, for example, using tools such as OWASP Zap, Burp Suite, Nmap and other tools found in Kali Linux.
4. Understanding of the software build process, static analysis and understanding of the benefits of Continuous Integration.

We think you could be a good fit if you are a team player who thinks holistically, enjoys solving complex problems and thrives working autonomously, while not afraid to ask for input and learn from your teammates if you’re stuck.

All experience levels will be considered.

Does this sound like you? We’d love you to apply, even if you don’t meet 100% of the requirements and qualifications.

Qush graduate program

Every new graduate hire is assigned a mentor, who will be a senior member of the team. Your mentor will be responsible for overseeing your development through the first few years of your career and ensuring that you are given the necessary support and guidance. Your mentor will also be responsible for ensuring that you gain experience in a number of different areas.

From day one graduate security engineers will be given the opportunity to become responsible for designing and developing a key part of the product. You will quickly gain experience across the full secure software development lifecycle from design through coding, testing, and support across a wide range of technologies and languages.

What we offer

1. Attractive salary with possibility for stock options
2. Flexible working hours
3. A remote-friendly organisation, with colleagues working remotely either part or full-time
4. A start up with solid financial backing and long-term horizon
5. Visa sponsorship available
6. Modern offices with disabled access and good transport links at The Mediaworks building in White City, West London, UK.

Qush is dedicated to encouraging and sustaining a culture of inclusion. We know that we are able to develop and learn better with a diverse group of people. The experiences, ideas, knowledge, self-expression and talent of our employees form our culture and are instrumental in our success.

We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to and will not be discriminated against based on age, race, gender, colour, religion, national origin, sexual orientation, gender identity, disability or any other protected characteristic.