Senior Platform Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee security tools spanning application security, dependency and supply chain security, artifact and container security, cloud security posture, and policy-driven workflows.

• Develop, integrate, and manage security platforms such as GitHub Advanced Security, JFrog Xray, Prisma, Black Duck, and Checkmarx.

• Create automation for vulnerability detection, dependency management, patch planning, remediation tracking, and regulated security workflows.

• Collaborate with Security and Engineering to transform policies and best practices into practical controls, delivery pipeline guardrails, and developer-friendly workflows.

• Enhance the developer experience with security tools by minimizing noise and clarifying remediation efforts.

• Propel security-centric initiatives and OKR efforts by defining technical strategies, breaking down tasks, and leading execution.

• Contribute to the ongoing health and enhancement of security tools, including those developed internally or powered by AI-assisted automation.

• Collaborate with operational teams to facilitate the secure adoption of AI-enabled engineering tools and establish controls surrounding their usage.

⛳️ Requirements

• Minimum of 2 years of experience in security engineering, platform engineering, development operations, site reliability engineering, or software engineering in production settings.

• Proficient programming or scripting abilities in Go, Python, Bash, or other comparable languages.

• Practical experience with security tools and methodologies including code scanning, dynamic testing, software composition analysis, secret scanning, container or image scanning, artifact security, cloud security posture management, and policy enforcement.

• Familiarity with or experience in platforms such as GitHub Advanced Security, JFrog Xray, Prisma, Black Duck, Checkmarx, Dependabot, Renovate, or similar tools.

• Strong grasp of vulnerability management, dependency management, and security controls within software delivery and developer workflows.

• Knowledge of Kubernetes, containers, cloud platforms, Git-based workflows, and infrastructure as code concepts.

• Capability to lead technical initiatives, conduct proofs of concept, and provide solutions based on ambiguous requirements.

• Excellent collaboration and communication skills.

• Experience utilizing AI-assisted tools to enhance engineering productivity, security workflows, and developer experiences.

• Familiarity with GitHub Copilot or Cursor.

• Experience applying AI to security scenarios such as log analysis, threat investigation, remediation support, or security documentation.

• Understanding of large language model APIs, agent-based workflows, or internally developed AI tools.

• Knowledge of AI security considerations, including data leakage, prompt injection, shadow AI, and enterprise AI policies.

• Preferred: familiarity with SOC 2 or similar compliance frameworks.

• Preferred: experience with AI-assisted or internally developed security automation.

• Preferred: understanding of modern software delivery environments.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Flexible working hours and remote work options.

• Opportunities for professional development and continuous learning.

• Collaborative and inclusive work environment.