Platform Security Engineer
Core
Establishing and maintaining the security posture of a cloud-based platform, including application hardening, infrastructure security, and secure scaling practices.
Role type
Senior Platform Security Engineer
Builds
Secure cloud infrastructure, authentication/authorization systems, and security tooling integrated into CI/CD pipelines
Domain
Cloud Security / Application Security
Deliverable
production ML models | product features | infrastructure
Required skills
Application and infrastructure security, Cloud security (GCP), IAM policies, OAuth and session security, Multi-tenant access control, Security scanning (SAST/DAST), CI/CD integration, Terraform, Penetration testing
Preferred skills
Node.js/Next.js environment experience, Security architecture design
Technologies
GCP, Terraform, OAuth, SAST, DAST
Responsibilities
Own application and infrastructure security across the platform, Harden authentication and API authorization patterns, Configure and maintain IAM policies and least-privilege access controls, Secure data flows including file uploads and secrets management, Set up and maintain security monitoring and alerting systems, Build and maintain security tooling in CI/CD pipelines, Perform security assessments and penetration testing, Respond to security incidents and conduct root cause analysis, Guide the engineering team on secure development practices
Seniority
Senior, hands-on IC
