Quanata
San Francisco, California
Job Description Job Description To help keep everyone safe, we encourage all applicants to pay close attention to protect themselves during their job search. When applying for a position online you are at risk of being targeted by malicious actors looking for personal data. Please be aware we will only reach out via email using the domain Anything that does not match those domains should be ignored and considered a security risk. About Us Quanata is on a mission to help ensure a better world through context-based insurance solutions. We are an exceptional, customer centered team with a passion for creating innovative technologies, digital products, and brands. We blend some of the best Silicon Valley talent and cutting-edge thinking with the long-term backing of leading insurer, State Farm. Learn more about us and our work at Our Team Quanata, LLC is an insurance technology innovation company that engineers advanced risk prediction and prevention solutions, develops risk-focused acquisition capabilities, and builds/supports a full-stack, flexible, digital & increasingly AI-native insurance platform. This helps our primary clients, State Farm and HiRoad Assurance Company, adapt to evolving market needs. Quanata, LLC is wholly owned and funded by State Farm. As a company that prioritizes an inclusive and positive culture, we believe the core of our success is in hiring talented people - across disciplines - who want to help us make a quantifiable impact. The Role We're looking for an Application Security Engineer to help build secure-by-default products and services across Quanata's AI-native insurance technology platform. In this role, you'll partner closely with Product, Engineering, and Security teams to identify risks early, strengthen secure development practices, and ensure our applications are resilient, scalable, and compliant. You'll play a key role in embedding security throughout the software development lifecycle while helping teams move quickly and safely. Your Day-to-Day Partner with Product and Engineering teams to integrate security into application design and development Lead threat modeling exercises and identify practical security solutions for complex systems Conduct secure code reviews, application security assessments, and vulnerability analysis Develop and implement automated security guardrails across the SDLC Investigate, prioritize, and drive remediation of application security findings Promote secure coding practices through training, coaching, and awareness initiatives Collaborate with Security, Privacy, and Business Assurance teams to support compliance and risk management objectives Create and maintain security standards, procedures, and best practices that scale across teams About You Associate's degree or equivalent experience required; Bachelor's degree preferred 4-6+ years of experience in software engineering, including at least 2 years focused on application security Experience partnering directly with software development teams to improve application security Knowledge of secure-by-design principles and modern application security practices Familiarity with OWASP Top 10, ASVS, MASVS, and common application security frameworks Experience with threat modeling methodologies such as STRIDE, PASTA, or similar approaches Working knowledge of cloud platforms and modern application architectures Proficiency in at least one programming language and its security ecosystem Strong communication skills and the ability to influence technical and non-technical stakeholders Comfortable operating in a fast-paced environment with shifting priorities Bonus Points Security certifications such as CSSLP, GWEB, OSWE, or similar Experience working in insurance, financial services, healthcare, or other regulated industries Advanced knowledge of cloud security and application security architecture Experience with mobile application security, QA testing, or penetration testing Familiarity with AI technologies, LLM security, or prompt engineering Experience building scripts or automations to streamline security processes Active involvement in the security community through conferences, mentoring, presentations, publications, or open-source contributions Salary: $175,000 to $215,000 Please note that the final salary offered will be determined based on the selected candidate's skills, and experience, as well as the internal salary structure at Quanata. Our aim is to offer a competitive and equitable compensation package that reflects the candidate's expertise and contributions to our organization. Additional Details: Benefits : We provide a wide variety of health, wellness and other benefits.These include medical, dental, vision, life insurance and supplemental income plans for you and your dependents, a Headspace app subscription, monthly wellness allowance and a 401(k) Plan with a company match. Work from Home Equipment : Given our virtual environment- in order to set you up for success at home, a one-time payment of $2K will be provided to cover the purchase of in-home office equipment and furniture at your discretion. Also, our teams work with MacBook Pros, which we will deliver to you fully provisioned prior to your first day. Paid Time Off: All employees accrue four weeks of PTO in their first year of employment. New parents receive twelve weeks of fully paid parental leave which may be taken within one year after the birth and/or adoption of a child. The twelve weeks is applicable to both birthing and non-birthing parent. Personal and Professional Development: We're committed to investing in and helping our people grow personally and professionally. All employees receive up to $5000 each year for professional learning, continuing education and career development. All team members also receive LinkedIn Learning subscriptions and access to multiple different coaching opportunities through BetterUp. Location : We are a remote-first company for most positions so you may work from anywhere you like in the U.S, excluding U.S. territories. For most positions, occasional travel may be requested or encouraged but is not required . Some positions might require travel per the job description provided to the employee. Employees based in the San Francisco Bay Area or in Providence, Rhode Island may commute to one of our local offices as desired. Hours : We maintain core meeting hours from 9AM - 2PM Pacific time for collaborating with team members across all time zones. Quanata, LLC is an equal opportunity workplace. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. If you are a San Francisco resident, please read the City and County of San Francisco's Fair Chance Ordinance notice. : - 12/FCO%20poster2020_0.pdf This role is employed by Quanata, LLC which is a separate company in the State Farm family of companies. If you require a reasonable accommodation, please reach out to your Talent Acquisition Partner for assistance.
Job Description Job Description To help keep everyone safe, we encourage all applicants to pay close attention to protect themselves during their job search. When applying for a position online you are at risk of being targeted by malicious actors looking for personal data. Please be aware we will only reach out via email using the domain Anything that does not match those domains should be ignored and considered a security risk. About Us Quanata is on a mission to help ensure a better world through context-based insurance solutions. We are an exceptional, customer centered team with a passion for creating innovative technologies, digital products, and brands. We blend some of the best Silicon Valley talent and cutting-edge thinking with the long-term backing of leading insurer, State Farm. Learn more about us and our work at Our Team Quanata, LLC is an insurance technology innovation company that engineers advanced risk prediction and prevention solutions, develops risk-focused acquisition capabilities, and builds/supports a full-stack, flexible, digital & increasingly AI-native insurance platform. This helps our primary clients, State Farm and HiRoad Assurance Company, adapt to evolving market needs. Quanata, LLC is wholly owned and funded by State Farm. As a company that prioritizes an inclusive and positive culture, we believe the core of our success is in hiring talented people - across disciplines - who want to help us make a quantifiable impact. The Role We're looking for an Application Security Engineer to help build secure-by-default products and services across Quanata's AI-native insurance technology platform. In this role, you'll partner closely with Product, Engineering, and Security teams to identify risks early, strengthen secure development practices, and ensure our applications are resilient, scalable, and compliant. You'll play a key role in embedding security throughout the software development lifecycle while helping teams move quickly and safely. Your Day-to-Day Partner with Product and Engineering teams to integrate security into application design and development Lead threat modeling exercises and identify practical security solutions for complex systems Conduct secure code reviews, application security assessments, and vulnerability analysis Develop and implement automated security guardrails across the SDLC Investigate, prioritize, and drive remediation of application security findings Promote secure coding practices through training, coaching, and awareness initiatives Collaborate with Security, Privacy, and Business Assurance teams to support compliance and risk management objectives Create and maintain security standards, procedures, and best practices that scale across teams About You Associate's degree or equivalent experience required; Bachelor's degree preferred 4-6+ years of experience in software engineering, including at least 2 years focused on application security Experience partnering directly with software development teams to improve application security Knowledge of secure-by-design principles and modern application security practices Familiarity with OWASP Top 10, ASVS, MASVS, and common application security frameworks Experience with threat modeling methodologies such as STRIDE, PASTA, or similar approaches Working knowledge of cloud platforms and modern application architectures Proficiency in at least one programming language and its security ecosystem Strong communication skills and the ability to influence technical and non-technical stakeholders Comfortable operating in a fast-paced environment with shifting priorities Bonus Points Security certifications such as CSSLP, GWEB, OSWE, or similar Experience working in insurance, financial services, healthcare, or other regulated industries Advanced knowledge of cloud security and application security architecture Experience with mobile application security, QA testing, or penetration testing Familiarity with AI technologies, LLM security, or prompt engineering Experience building scripts or automations to streamline security processes Active involvement in the security community through conferences, mentoring, presentations, publications, or open-source contributions Salary: $175,000 to $215,000 Please note that the final salary offered will be determined based on the selected candidate's skills, and experience, as well as the internal salary structure at Quanata. Our aim is to offer a competitive and equitable compensation package that reflects the candidate's expertise and contributions to our organization. Additional Details: Benefits : We provide a wide variety of health, wellness and other benefits.These include medical, dental, vision, life insurance and supplemental income plans for you and your dependents, a Headspace app subscription, monthly wellness allowance and a 401(k) Plan with a company match. Work from Home Equipment : Given our virtual environment- in order to set you up for success at home, a one-time payment of $2K will be provided to cover the purchase of in-home office equipment and furniture at your discretion. Also, our teams work with MacBook Pros, which we will deliver to you fully provisioned prior to your first day. Paid Time Off: All employees accrue four weeks of PTO in their first year of employment. New parents receive twelve weeks of fully paid parental leave which may be taken within one year after the birth and/or adoption of a child. The twelve weeks is applicable to both birthing and non-birthing parent. Personal and Professional Development: We're committed to investing in and helping our people grow personally and professionally. All employees receive up to $5000 each year for professional learning, continuing education and career development. All team members also receive LinkedIn Learning subscriptions and access to multiple different coaching opportunities through BetterUp. Location : We are a remote-first company for most positions so you may work from anywhere you like in the U.S, excluding U.S. territories. For most positions, occasional travel may be requested or encouraged but is not required . Some positions might require travel per the job description provided to the employee. Employees based in the San Francisco Bay Area or in Providence, Rhode Island may commute to one of our local offices as desired. Hours : We maintain core meeting hours from 9AM - 2PM Pacific time for collaborating with team members across all time zones. Quanata, LLC is an equal opportunity workplace. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. If you are a San Francisco resident, please read the City and County of San Francisco's Fair Chance Ordinance notice. : - 12/FCO%20poster2020_0.pdf This role is employed by Quanata, LLC which is a separate company in the State Farm family of companies. If you require a reasonable accommodation, please reach out to your Talent Acquisition Partner for assistance.
Northrop Grumman
Los Angeles, California
RELOCATION ASSISTANCE: No relocation assistance available CLEARANCE REQUIRED FOR START: No CLEARANCE TYPE: Secret TRAVEL: Yes, 10% of the Time Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Northrop Grumman Defense Systems (DS) is seeking a Software Quality Assurance Manager 2 to join our Advanced Weapons Business Unit at the Northridge, CA location. Our Advanced Weapons team designs, develops, and manufactures missile systems that support U.S. national and allied security objectives. This position is required to be full-time, on-site in the Northridge, CA location. No remote/telework arrangement is available for this position. Applicants must have the ability to obtain and maintain a US Government DoW Secret clearance. The Software Quality Assurance Manager leads the planning, execution, and continual improvement of all software quality activities for defense grade systems. The role ensures that software products meet stringent DoD specifications, safety, reliability, and security standards throughout the development lifecycle. The manager mentors a multidisciplinary SQA team, collaborates with engineering, test, and program management, and serves as the primary liaison with certification bodies and government auditors. KEY RESPONSIBILITIES: Quality Strategy & Planning - Define and maintain the SQA strategy aligned with DoD standards (e.g., MIL STD 498, MIL STD 2167A, DODAF, DI COT, DoD Cybersecurity Maturity Model Certification - CMMC). Develop and enforce a comprehensive Quality Assurance Plan (QAP) for each program, including verification & validation (V&V) schedules, metrics, and risk mitigation actions. Process & Compliance - Oversee implementation of software development processes (Agile, Scrum, or Waterfall) that satisfy Earned Value Management (EVM), Capability Maturity Model Integrated (CMMI) Level 3, and Software Configuration Management (SCM) requirements. Conduct internal audits, prepare for external CDRL reviews, and ensure compliance with ISO 9001, IEC 61508, CMMI, and applicable defense acquisition regulations. Test Management - Direct functional, integration, system, and acceptance testing on simulators, hardware in the loop (HITL) rigs, and field environments. Manage automated test frameworks, continuous integration/continuous deployment (CI/CD) pipelines, and static/dynamic analysis tools (e.g., DO 178C, MISRA C, Coverity, SonarQube). Defect Management - Establish defect tracking policies, prioritize root cause analysis, and coordinate corrective actions across development teams. Monitor defect density, mean time to detect/resolve, and trend data to drive process improvements. Team Leadership - Recruit, train, and mentor SQA engineers, test pilots, and subject matter experts. Conduct performance reviews, define career development paths, and foster a culture of quality and security awareness. Stakeholder Coordination - Interface with program managers, system engineers, customers, and government auditors to communicate quality status, risks, and mitigation plans. Prepare and present quality reports, dashboards, and risk assessments to senior leadership and contract officers. Continuous Improvement - Lead lessons learned sessions, implement Kaizen/Lean initiatives, and update process documentation to reflect evolving defense standards and emerging cyber threats BASIC QUALIFICATIONS: Bachelor's degree in Computer Science, Electrical Engineering, Systems Engineering, or a related field with 8+ years of software development experience in the defense sector OR Master's degree with 6+ years of the same experience. 12 years of experience required in lieu of a formal degree 3+ years of experience in a supervisory or lead SQA role Proven expertise with defense standards such as MIL STD 498, DO 178C, CMMC, ISO 9001, IEC 61508, and related acquisition regulations. Hands on experience with test automation and CI/CD tools (e.g., Jenkins, GitLab CI), defect tracking systems (JIRA, DOORS), static analysis tools (Coverity, Polyspace), and simulation environments. Demonstrated success leading internal and external audits, CDRL reviews, and compliance assessments. Strong people management skills, with the ability to motivate cross functional teams under tight schedules. Ability to obtain and maintain a US Government DoD Secret clearance PREFERRED QUALIFICATIONS: Certified Quality Engineer (ASQ CQE) or Certified Software Quality Engineer (ASQ CSQE). Experience with safety critical systems (e.g. missile guidance, command and control). Knowledge of cybersecurity frameworks (NIST , RMF, DoD Cybersecurity Strategy). Exposure to Agile Scaled frameworks (SAFe) applied to defense contracts. Exposure to working with DCMA, NAVAIR, and TPO. Primary Level Salary Range: $146,600.00 - $219,800.00 The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business. The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.
RELOCATION ASSISTANCE: No relocation assistance available CLEARANCE REQUIRED FOR START: No CLEARANCE TYPE: Secret TRAVEL: Yes, 10% of the Time Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Northrop Grumman Defense Systems (DS) is seeking a Software Quality Assurance Manager 2 to join our Advanced Weapons Business Unit at the Northridge, CA location. Our Advanced Weapons team designs, develops, and manufactures missile systems that support U.S. national and allied security objectives. This position is required to be full-time, on-site in the Northridge, CA location. No remote/telework arrangement is available for this position. Applicants must have the ability to obtain and maintain a US Government DoW Secret clearance. The Software Quality Assurance Manager leads the planning, execution, and continual improvement of all software quality activities for defense grade systems. The role ensures that software products meet stringent DoD specifications, safety, reliability, and security standards throughout the development lifecycle. The manager mentors a multidisciplinary SQA team, collaborates with engineering, test, and program management, and serves as the primary liaison with certification bodies and government auditors. KEY RESPONSIBILITIES: Quality Strategy & Planning - Define and maintain the SQA strategy aligned with DoD standards (e.g., MIL STD 498, MIL STD 2167A, DODAF, DI COT, DoD Cybersecurity Maturity Model Certification - CMMC). Develop and enforce a comprehensive Quality Assurance Plan (QAP) for each program, including verification & validation (V&V) schedules, metrics, and risk mitigation actions. Process & Compliance - Oversee implementation of software development processes (Agile, Scrum, or Waterfall) that satisfy Earned Value Management (EVM), Capability Maturity Model Integrated (CMMI) Level 3, and Software Configuration Management (SCM) requirements. Conduct internal audits, prepare for external CDRL reviews, and ensure compliance with ISO 9001, IEC 61508, CMMI, and applicable defense acquisition regulations. Test Management - Direct functional, integration, system, and acceptance testing on simulators, hardware in the loop (HITL) rigs, and field environments. Manage automated test frameworks, continuous integration/continuous deployment (CI/CD) pipelines, and static/dynamic analysis tools (e.g., DO 178C, MISRA C, Coverity, SonarQube). Defect Management - Establish defect tracking policies, prioritize root cause analysis, and coordinate corrective actions across development teams. Monitor defect density, mean time to detect/resolve, and trend data to drive process improvements. Team Leadership - Recruit, train, and mentor SQA engineers, test pilots, and subject matter experts. Conduct performance reviews, define career development paths, and foster a culture of quality and security awareness. Stakeholder Coordination - Interface with program managers, system engineers, customers, and government auditors to communicate quality status, risks, and mitigation plans. Prepare and present quality reports, dashboards, and risk assessments to senior leadership and contract officers. Continuous Improvement - Lead lessons learned sessions, implement Kaizen/Lean initiatives, and update process documentation to reflect evolving defense standards and emerging cyber threats BASIC QUALIFICATIONS: Bachelor's degree in Computer Science, Electrical Engineering, Systems Engineering, or a related field with 8+ years of software development experience in the defense sector OR Master's degree with 6+ years of the same experience. 12 years of experience required in lieu of a formal degree 3+ years of experience in a supervisory or lead SQA role Proven expertise with defense standards such as MIL STD 498, DO 178C, CMMC, ISO 9001, IEC 61508, and related acquisition regulations. Hands on experience with test automation and CI/CD tools (e.g., Jenkins, GitLab CI), defect tracking systems (JIRA, DOORS), static analysis tools (Coverity, Polyspace), and simulation environments. Demonstrated success leading internal and external audits, CDRL reviews, and compliance assessments. Strong people management skills, with the ability to motivate cross functional teams under tight schedules. Ability to obtain and maintain a US Government DoD Secret clearance PREFERRED QUALIFICATIONS: Certified Quality Engineer (ASQ CQE) or Certified Software Quality Engineer (ASQ CSQE). Experience with safety critical systems (e.g. missile guidance, command and control). Knowledge of cybersecurity frameworks (NIST , RMF, DoD Cybersecurity Strategy). Exposure to Agile Scaled frameworks (SAFe) applied to defense contracts. Exposure to working with DCMA, NAVAIR, and TPO. Primary Level Salary Range: $146,600.00 - $219,800.00 The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business. The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.
