Platform Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as a daily security consultant during sprint planning, architectural evaluations, process discussions, product strategies, design choices, and task execution.

• Develop and sustain centralized automated security testing and enforcement within CI/CD, encompassing SAST/DAST, SCA, secrets scanning, and IaC scanning.

• Oversee centralized cloud monitoring tools for vulnerability and configuration management.

• Incorporate continuous patching and hardening into engineering workflows.

• Conduct audits of application environments and development methodologies to ensure compliance with internal and external standards and security regulations.

• Establish and uphold cloud detection and response monitoring systems.

• Serve as an incident CIRT responder.

• Record controls, configurations, and decisions.

• Enforce policies and detection mechanisms using device management tools like FleetMDM.

• Contribute to the construction and management of production infrastructure.

• Report directly to the Chief Technology Officer.

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent hands-on experience.

• Over 8 years of experience in DevOps, software engineering, or security engineering.

• Expertise with CI/CD platforms such as GitHub Actions.

• Proficiency with infrastructure-as-code tools like Terraform.

• Skilled in configuration management tools such as Ansible.

• Knowledgeable in at least two programming languages: Go, JavaScript, Rust, and Python.

• Hands-on experience in cloud security across GCP, Alibaba, AWS, OVH, Hetzner, and/or Azure.

• Familiarity with identity and access management, containerization, network security controls, encryption, logging, and monitoring.

• Experience in hardening access and controls, including IAM policies.

• Practical experience with Kubernetes GitOps, like Flux or ArgoCD.

• Proven experience in implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement.

• Understanding of penetration testing applications or participation in penetration testing engagements.

• Strong scripting abilities in Python or Bash.

• Experience in supporting third-party attestations and audits, including SOC 2 Type 2 and ISO 27001.

• Familiarity with operating and maintaining Zero Trust network infrastructures using Tailscale and Cloudflare WARP.

• Excellent communication and governance skills, including the ability to convey technical risks in business language and advocate for security without hindering delivery.

• Must reside in the U.S.A.

🏝️ Benefits

• Minimal travel required, if any.

• Fully remote work setup.

• Equal employment opportunity, irrespective of race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.