Senior Platform Engineer – Security, Compliance

📋 Description

• Participate in the design, development, and enhancement of security-related capabilities for platforms utilized in contemporary financial systems.

• Contribute to fortifying the security posture of our AWS environments by engaging with cloud security controls, threat detection, vulnerability management, incident response, and operational security processes.

• Influence our platform and engineering standards by collaborating with development teams, the Security team, and external partners such as penetration testers and auditors.

• Assist product and engineering teams in crafting secure solutions and enhancing the security of applications and platform components in highly regulated environments, including web application security practices and secure design evaluations.

• Engage in internal security reviews and technical audits, aiding in risk identification, security posture improvement, and ensuring the practical implementation of security-related requirements.

• Serve as one of the primary technical owners on the Platform side for specific security, compliance, and audit-related initiatives, assisting engineering teams in understanding and implementing requirements in line with industry standards such as PCI DSS.

• Propel vulnerability remediation efforts by guiding engineering teams in identifying, prioritizing, and effectively addressing security findings.

• Utilize AWS security services and tools including AWS Web Application Firewall (WAF), Amazon GuardDuty, AWS Network Firewall, AWS CloudTrail, AWS Key Management Service (KMS), and AWS Shield, along with Wiz, Microsoft Sentinel, incident.io, Jira, Confluence, and Git.

• Employ modern AI development tools in your work.

⛳️ Requirements

• Over 5 years of professional experience in platform engineering, cloud security, security engineering, DevSecOps, or related roles.

• Solid hands-on experience with AWS security services and security controls in cloud environments.

• Practical experience with tools and processes associated with vulnerability management, security alerting, and cloud security monitoring.

• Experience in security incident response and operational management of security-related issues.

• Familiarity with web application security and secure design methodologies.

• Proven experience collaborating with product or engineering teams to enhance the security of applications and platform solutions.

• Background in supporting technical audits, compliance activities, or security control assessments in production environments.

• Experience with technical security controls in regulated or highly controlled production settings.

• Strong comprehension of cloud security practices, auditability, and operational security requirements.

• A willingness and enthusiasm to collaborate and work effectively within a team.

🏝️ Benefits

• Private medical care

• Life insurance

• Multisport (including a partially funded family card)

• Library

• Concierge service

• Internal conferences, training, and events: Northcon (annual company conference in attractive locations such as Spain, Austria, Sweden, Croatia), Northchill, Study Group, Summer Party