Platform Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and enhance engineering workflows and tools for managing vulnerabilities across applications, dependencies, containers, and infrastructure.

• Incorporate security checks and policy controls into software delivery pipelines and developer processes.

• Optimize dependency management and package governance.

• Assess, implement, and fine-tune SAST, DAST, SCA, secret scanning, and related platform controls.

• Create automation to minimize repetitive manual remediation efforts and speed up secure delivery.

• Advocate for secure-by-default patterns, templates, and guardrails.

• Analyze findings, prioritize risks, and convert them into remediation strategies.

• Contribute to secure software development lifecycle methodologies, documentation, and internal guidelines.

• Evaluate the effectiveness and adoption of security controls and suggest enhancements.

• Report to the Associate Director of Product Engineering, receiving technical direction and architectural guidance from the Chief Architect through a dotted-line relationship.

⛳️ Requirements

• 3-5 years of experience in security engineering, platform engineering, DevSecOps, or a closely related technical position.

• Hands-on experience with the implementation of security tools and controls in contemporary software delivery settings.

• Knowledge of vulnerability management, dependency management, package governance, or software supply chain security.

• Familiarity with CI/CD, source control workflows, infrastructure automation, and cloud-based application environments.

• Capability to write scripts or automate processes to enhance security measures and minimize manual tasks.

• Strong judgment in balancing risk reduction, developer experience, and delivery requirements.

• Excellent communication skills with the ability to collaborate effectively with engineers, architects, and business stakeholders.

• Capacity to work independently and effectively as part of a cross-functional team, manage substantial technical tasks, and mentor peers in an area of expertise.

• Experience with AWS infrastructure and services, as well as common engineering tools, is advantageous.

• Familiarity with AI-enabled tools is a plus, but not mandatory.

• Must reside and work within the continental United States.

• Must not require immigration sponsorship or additional work authorization to work in the United States.

🏝️ Benefits

• Medical, dental, and vision insurance plans.

• Employer-funded 10% retirement contribution.

• Paid parental and caregiver leave.

• 22 days of paid time off.

• 11 paid holidays.

• Up to 12 paid sick days.

• Wellness benefits.