Platform Security Engineer

You will own security and compliance within the platform scope while helping build and operate production infrastructure. You will embed security into engineering processes, automate testing and enforcement, manage cloud security monitoring, support audits, respond to incidents, and maintain clear documentation of controls and decisions.

Responsibilities

• Serve as a day-to-day security advisor during planning, architecture reviews, process discussions, product direction, design decisions, and active work.
• Build and maintain centralized automated security testing and enforcement in CI/CD, including SAST, DAST, SCA, secrets scanning, and IaC scanning.
• Manage centralized cloud monitoring for vulnerability and configuration management.
• Integrate ongoing patching and hardening into engineering operations.
• Audit application environments and development processes for compliance and security-standard alignment.
• Implement and maintain cloud detection and response monitoring.
• Act as an incident CIRT responder.
• Document controls, configurations, and decisions.
• Enforce policies and detection using device-management tooling.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.
• 8+ years of experience in DevOps, software engineering, or security engineering.
• Proficiency with CI/CD platforms, infrastructure-as-code tools, and configuration management.
• Proficiency in at least two of Go, JavaScript, Rust, and Python.
• Hands-on cloud security experience across specified cloud providers, including IAM, containerization, network controls, encryption, logging, and monitoring.
• Experience hardening access and controls, including IAM policy.
• Hands-on Kubernetes GitOps experience.
• Experience implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement.
• Familiarity with penetration-testing applications or conducting penetration-testing engagements.
• Strong Python or Bash scripting skills.
• Experience supporting third-party attestations and audits, including SOC 2 Type 2 or ISO 27001.
• Experience operating and maintaining Zero Trust networks using Tailscale and Cloudflare WARP.
• Experience deploying, configuring, and administering SIEM.
• Communication and governance skills to explain technical risk to technical and non-technical audiences.