Platform Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee security tools related to application security, supply chain and dependency security, container and artifact security, cloud security posture, and policy-driven workflows.

• Develop, integrate, and manage security platforms such as GitHub Advanced Security, JFrog Xray, Prisma, Black Duck, and Checkmarx.

• Create automation solutions for vulnerability detection, dependency management, patch planning, remediation tracking, and regulated security workflows.

• Collaborate with Security and Engineering teams to transform policies and best practices into actionable controls, delivery pipeline guardrails, and developer-friendly workflows.

• Enhance the developer experience with security tools by minimizing noise and clarifying remediation processes.

• Propel security-centric initiatives and OKR initiatives by defining technical strategies, segmenting tasks, and leading implementation.

• Assist in the ongoing maintenance and enhancement of security tools, including those developed internally or enhanced with AI-driven automation.

• Collaborate with operational teams to facilitate the secure adoption of AI-enhanced engineering tools and establish controls for their usage.

⛳️ Requirements

• A minimum of 2 years of experience in security engineering, platform engineering, development operations, site reliability engineering, or software engineering within production environments.

• Proficient programming or scripting capabilities in Go, Python, Bash, or similar languages.

• Practical experience with security tools and methodologies, including code scanning, dynamic testing, software composition analysis, secret scanning, container or image scanning, artifact security, cloud security posture management, and policy enforcement.

• Familiarity with platforms such as GitHub Advanced Security, JFrog Xray, Prisma, Black Duck, Checkmarx, Dependabot, Renovate, or equivalent tools.

• In-depth knowledge of vulnerability management, dependency management, and security controls within software delivery and developer workflows.

• Understanding of Kubernetes, containers, cloud platforms, Git-based workflows, and infrastructure as code principles.

• Capacity to lead technical initiatives, conduct proofs of concept, and provide solutions based on ambiguous requirements.

• Excellent collaboration and communication abilities, with a knack for translating security requirements into practical engineering solutions.

• Experience with AI-assisted tools to enhance engineering productivity, security workflows, and developer experience.

• Familiarity with AI-assisted coding tools like GitHub Copilot or Cursor.

• Experience applying AI to security scenarios such as log analysis, threat investigation, remediation support, or security documentation.

• Familiarity with large language model APIs, agent-based workflows, or proprietary AI tools.

• Awareness of security considerations related to AI tools, including data leakage, prompt injection, shadow AI, and enterprise AI policies.

• Exposure to compliance-driven environments like SOC 2 or similar frameworks (preferred).

• Experience supporting AI-assisted or internally developed security automation (preferred).

• Knowledge of modern software delivery environments where security tools effectively balance risk mitigation with engineering speed (preferred).

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Flexible working hours and remote work options.

• Professional development opportunities and continuous learning.

• Collaborative and innovative team environment.