IT & Security Lead at Maybell Quantum

Denver, COFull-timeBusiness OperationsPosted 24 days ago

About the Role

At Maybell Quantum, we're redefining the future of computing. As a venture-backed quantum hardware innovator experiencing rapid growth, we build the cryogenic infrastructure that quantum computers run on — dilution refrigerators, cryogenic RF wiring, and the related systems used by quantum computing companies, national labs, and research institutions worldwide. Quantum computers will be as transformative to the next 30 years as the internet was to the last 30—and our team is creating the hardware foundation to make this revolution possible.  Position Overview  We're seeking a hands-on IT & Security Lead to become Maybell's first dedicated security hire and the owner of our security program. This is a high-ownership, high-visibility role with real architectural authority: you will decide how our environment is defended, and you will also be the person who implements it.  Security at Maybell is not a paper exercise. We are roughly 100 people (and growing) with the security complexity of a much larger company—multiples countries, a manufacturing floor, cryogenic and RF test labs, GDPR obligations, and engineering systems holding export-controlled technical data. That work currently runs through the executive team. It needs an owner.  Your primary focus is cybersecurity: identity and access, endpoint and email defense, vulnerability and patch management, logging and monitoring, incident response, and the access controls that protect controlled technical data across all three sites. You will also provide day-to-day IT troubleshooting and end-user support as needed.  You'll partner closely with Operations, Engineering, Trade Compliance, and executive leadership to protect the company's most sensitive technical work without slowing down a manufacturing floor or a test lab.   Key Responsibilities  Security Program Ownership  <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1">Own and mature Maybell's security baseline across all three sites: endpoint protection, patch and vulnerability management, logging, backup and recovery, and periodic access reviews. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="2" data-aria-level="1">Set the security architecture and technical standards for how our environment is built, and enforce them in practice. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="3" data-aria-level="1">Prepare and maintain the security posture documentation that customers, insurers, and investors will ask for in diligence. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="4" data-aria-level="1">Run security awareness training and phishing simulation, and build a culture where reporting is normal. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="5" data-aria-level="1">Own physical site access security — badging and access control systems, visitor and escort procedures, and restricted-area controls for labs, server rooms, and the manufacturing floor across all three sites. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="6" data-aria-level="1">Track and report on security metrics — coverage, patch latency, incident volume, and access review completion—and use them to prioritize. </li> </ul> Identity and Access Security  <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="7" data-aria-level="1">Own the security configuration of Microsoft 365 and Entra ID: conditional access, MFA, privileged access, and guest and external sharing governance. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="8" data-aria-level="1">Own Defender and the broader M365 security stack, plus email authentication (SPF, DKIM, DMARC) and mail hygiene. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="9" data-aria-level="1">Use Intune to enforce endpoint security policy across Windows and macOS at three sites. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="10" data-aria-level="1">Own the joiner/mover/leaver process—provisioning, access changes, and offboarding that actually completes. </li> </ul> Security Operations and Incident Response  <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="11" data-aria-level="1">Serve as first responder for phishing, account compromise, and endpoint incidents, with MSP and external IR support as needed. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="12" data-aria-level="1">Build and maintain incident response runbooks, and run tabletop exercises against them. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="13" data-aria-level="1">Own detection and logging coverage, and triage what those signals surface. </li> </ul> Controlled Technical Data  <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1">Implement and maintain access controls on export-controlled technical data. Our Trade Compliance function determines who is permitted access; you build and enforce the controls that make that real, and you provide the evidence that they worked. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="15" data-aria-level="1">Support access reviews, egress visibility, and offboarding hygiene on controlled data. This is a meaningful part of the role, not a footnote. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="16" data-aria-level="1">Maintain the experience and certification requirements for personnel who handle export-controlled technical data — confirm that training, certification, and authorization prerequisites are satisfied before access is granted, re-verify on role change, and keep the supporting records. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="17" data-aria-level="1">Classification of controlled technical data belongs to Trade Compliance; implementation and enforcement belong to you. That separation is deliberate. </li> </ul> Engineering, Manufacturing, and Lab Systems  <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="18" data-aria-level="1">Secure CAD, PLM, and engineering file infrastructure—in scope for this role, not left to engineering. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="19" data-aria-level="1">Own source code security — repository access and branch protections, secrets management so credentials never live in code, and CI/CD pipeline security including build integrity, dependency risk, and artifact signing. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="20" data-aria-level="1">Design and maintain network segmentation for lab and test instrumentation that cannot be patched or managed conventionally. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="21" data-aria-level="1">Address manufacturing IT risk: shop floor systems, ERP endpoints, and the practical realities of instrument PCs running vendor software with long support tails. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="22" data-aria-level="1">Hold a standing working relationship with Operations and Engineering leadership on manufacturing and lab systems. Those functions are partners with real operational stakes, not just internal customers. </li> </ul> IT Operations and Support  <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="23" data-aria-level="1">Provide day-to-day IT troubleshooting and end-user support as needed. This is a secondary responsibility—real, but not the focus of the role. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="24" data-aria-level="1">Support all global locations, including network, procurement, and local vendor coordination. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="25" data-aria-level="1">Own IT vendor and license management—MSP, SaaS portfolio, hardware procurement, and renewals </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="26" data-aria-level="1">Push routine support and administration to automation, self-service, and our MSP wherever it can go, so security work stays the priority. </li> </ul> Qualifications  <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="27" data-aria-level="1">8+ years in IT or security with progressive ownership; you've been the senior or sole technical decision-maker for an environment. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="28" data-aria-level="1">Practical security ownership—you've run patching, access reviews, and at least one real incident end to end. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="29" data-aria-level="1">Deep, current Microsoft 365 and Entra ID security expertise: conditional access, Intune, and Defender in production, not in a lab. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="30" data-aria-level="1">Experience supporting a physical operating environment—manufacturing, labs, or hardware engineering. A background exclusively in software companies is unlikely to prepare you for this. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="31" data-aria-level="1">Willingness to handle IT troubleshooting and end-user support when it's needed, without letting it crowd out the security program. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="32" data-aria-level="1">Comfort being the person who says no to local admin, unmanaged devices, and shadow SaaS—including to senior people. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="33" data-aria-level="1">Exposure to regulated data handling—export controls, ITAR/EAR, CMMC, GDPR, or similar—is a strong plus. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="34" data-aria-level="1">Multi-site or international support experience, ideally including Europe, is a strong plus. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="35" data-aria-level="1">Experience managing an MSP relationship rather than being managed by one is a strong plus. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="36" data-aria-level="1">Network segmentation for OT or lab environments, and CAD/PLM platform experience (SolidWorks PDM, Windchill, or comparable), are strong pluses. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="37" data-aria-level="1">Application and source code security experience — repository access controls, secrets management tooling, and securing CI/CD pipelines (GitHub/GitLab, Azure DevOps, or comparable) — is a strong plus. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="38" data-aria-level="1">Familiarity with physical security and site access controls — badging and access control systems, visitor management, and restricted-area procedures — is a strong plus. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="39" data-aria-level="1">Relevant certifications (CISSP, CISM, SC-200, AZ-500, or comparable) are welcome but not required. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="40" data-aria-level="1">Comfort operating with autonomy and ambiguity in a fast-moving, resource-constrained environment. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="41" data-aria-level="1">Demonstrated desire to own and build—not just execute someone else's playbook. </li> </ul> What We Offer  <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="42" data-aria-level="1">Competitive Compensation: Base salary range $150,000–$170,000, depending on depth of security and M365 ownership and manufacturing environment experience, plus meaningful equity participation and annual bonus eligibility. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="43" data-aria-level="1">Real Authority: You will set the security architecture for the company, not inherit someone else's. This is the founding security role. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="44" data-aria-level="1">Growth Trajectory: A direct path to building and leading Maybell's security function as the company scales. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="45" data-aria-level="1">Impact: Direct responsibility for protecting the technical work behind one of the most transformative technologies of our lifetime. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="46" data-aria-level="1">Exceptional Team: Collaboration with world-class scientists, engineers, and business leaders who are defining a new industry. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="47" data-aria-level="1">Comprehensive Benefits: Medical, dental, and vision insurance, 401(k), and paid time off. </li> </ul> At Maybell Quantum, we're solving incredibly challenging problems at the cutting edge of physics and engineering. If you're excited about defending one of the most transformative technologies of our lifetime, we want to hear from you.  Maybell is an equal opportunity employer. Because this role involves administrative access to systems containing export-controlled technical data, we may be required to verify your status as a U.S. person or to obtain export authorization; we assess this consistently with applicable law and do not discriminate on the basis of citizenship or national origin beyond what U.S. export regulations require.

About the Role

Related Roles