About Secure Quantum
Secure Quantum is an Applied Quantum company that provides advanced cybersecurity consulting with a focus on critical infrastructure protection in the quantum era. We partner with utilities, transportation networks, telecommunications operators, and other critical infrastructure organizations to assess their security vulnerabilities and implement quantum-safe solutions. By leveraging our expertise in both operational technology (OT) security and quantum-safe cryptography, we help safeguard the systems that society depends on most. Secure Quantum’s approach is holistic and forward-looking, aligning security enhancements with emerging standards and government guidelines to ensure critical operations remain safe and resilient as technology evolves.
Job Summary
We are seeking an experienced Quantum Security Consultant – Critical Infrastructure to advise and support clients in energy, utilities, telecommunications, and other critical sectors. In this role, you will evaluate the unique cybersecurity challenges these organizations face, particularly how future quantum-enabled cyberattacks could impact industrial control systems and other critical technologies. You will develop tailored strategies to implement quantum-resistant security measures within these environments, balancing security with the practical constraints of legacy systems and operational uptime requirements. This is a client-facing role that requires both deep cybersecurity knowledge and industry-specific insight, as well as the ability to navigate regulatory considerations. Security clearance may be required for certain projects due to the sensitive nature of the work.
Key Responsibilities
- Security Assessments: Conduct detailed cybersecurity assessments of critical infrastructure environments (such as power grid control systems, water treatment SCADA systems, telecom networks). Identify current cryptographic practices and other security controls, and pinpoint vulnerabilities that would be exacerbated by the advent of quantum computing (e.g., reliance on vulnerable encryption in SCADA communications or VPN links).
- Quantum-Safe Strategy Development: Develop custom security enhancement plans focused on quantum threat mitigation. This could include recommending post-quantum cryptographic algorithms for software and device updates, designing secure communication architectures (possibly incorporating QKD for high-sensitivity links), and establishing crypto-agility processes for ongoing adaptability. Ensure that proposed solutions account for operational constraints like low processing overhead and high availability requirements common in OT systems.
- Implementation Guidance: Work hands-on with client teams to implement recommended security upgrades. For example, guide the rollout of PQC algorithms in firmware updates for PLCs or the integration of quantum-safe VPN appliances within a utility’s network. Provide expertise to troubleshoot and adapt solutions to fit legacy equipment and to minimize any downtime during transitions.
- Policy & Compliance Advisory: Advise clients on compliance with emerging regulations and standards related to quantum security and critical infrastructure. This might involve aligning with government directives (such as utility cybersecurity guidelines or telecom security requirements) and preparing documentation or evidence to demonstrate quantum-readiness to regulators or stakeholders.
- Training & Awareness: Conduct workshops or training sessions for client stakeholders (engineers, IT staff, management) to raise awareness about quantum threats and the importance of the implemented measures. Develop easy-to-understand materials that help non-cryptographers grasp the rationale for changes in security practices.
- Liaison with Government/Industry Bodies: Where appropriate, serve as a liaison between our clients and relevant government or industry bodies on matters of quantum security. For instance, participate in industry forums on critical infrastructure protection or provide input on standardization efforts by demonstrating challenges observed in the field.
- Continuous Improvement: Stay current on both quantum technology progress and industry-specific cyber threats. Continuously refine consulting approaches and keep our service offerings aligned with the best available defenses. Internally, share insights and case studies from projects to help improve Secure Quantum’s knowledge base and methodologies for critical infrastructure security.
Qualifications
- Experience: 7+ years of cybersecurity experience, with at least 3+ years focused on critical infrastructure or industrial control system (ICS/OT) security. Prior roles could include security consultant/architect for utilities or manufacturing, ICS security engineer, or similar.
- Technical Knowledge: Strong understanding of industrial control systems (SCADA, DCS, PLCs) and their typical network architectures. Knowledge of how cryptography and secure communications are currently applied in OT environments (for example, use of VPNs, proprietary protocols, wireless sensor security, etc.). Familiarity with post-quantum cryptography and other quantum-safe technologies is a significant plus (you will be expected to learn quickly on the job if not already deeply familiar).
- Regulatory Awareness: Knowledge of industry regulations and standards related to critical infrastructure cybersecurity (e.g., NERC CIP for power, NIST guidelines for critical infrastructure, IEC 62443 for industrial systems, telecom security regulations). Experience working within regulated environments and preparing compliance documentation is beneficial.
- Problem-Solving: Ability to craft creative solutions that enhance security without hindering operational reliability. Many critical infrastructure systems have legacy components – you should be adept at finding pragmatic ways to improve security given such constraints.
- Communication and Consulting Skills: Excellent interpersonal skills and the ability to communicate effectively with a range of stakeholders. This includes technical teams on-site, as well as executives and possibly public sector officials. Proven ability to write clear reports and deliver persuasive presentations or training.
- Security Clearance: Ability to obtain a security clearance is required (existing clearance preferred). Projects may involve national critical infrastructure and interactions with government agencies, necessitating cleared personnel.
- Education: Bachelor’s degree in Computer Science, Electrical Engineering, Cybersecurity or related field. A Master’s degree or relevant certifications (e.g., CISSP, GIAC GICSP for industrial security, CISM) are strong assets.
What We Offer
- Mission-Focused Work: The chance to make a tangible impact by securing essential services and infrastructure that millions of people rely on.
- Expert Team: Work alongside some of the industry’s top experts in cryptography, quantum technology, and OT security, providing a rich environment for collaboration and learning.
- Competitive Benefits: Competitive salary, performance incentives, and a comprehensive benefits package. For roles requiring clearance, we provide support throughout the clearance process and related benefits.
- Professional Development: Opportunities to attend industry conferences, obtain advanced training in both quantum security and industrial security, and stay at the forefront of two dynamic fields.
- Flexible Work: While some on-site work at client facilities may be necessary, we support flexible and remote working arrangements when possible. We value work-life balance and understand the sometimes demanding nature of consulting work.
How to Apply
If you have a strong background in cybersecurity and are excited about protecting critical infrastructure from emerging threats, we encourage you to apply. Please submit your resume and a cover letter detailing your relevant experience in critical infrastructure security and your interest in quantum-safe security solutions. Applicants who currently hold relevant security clearances or have worked on government-linked projects should note that in their application.
Join Secure Quantum and help fortify the backbone of modern society – ensuring that power grids, communication networks, and other critical systems remain safe and resilient in the quantum age.
