Platform Engineer | Security Engineer | Senior

Platform Engineer | Security Engineer | Senior

Job Description

We are seeking a highly skilled Senior Platform/Security Engineer with strong expertise in application security, cloud security, DevSecOps, IAM, and secure software engineering. The ideal candidate will be responsible for designing, implementing, and maintaining secure platforms, applications, infrastructure, and CI/CD pipelines while ensuring compliance with modern security best practices.

Key Responsibilities

• Design and implement secure application and platform architectures.
• Apply secure coding practices, encryption techniques, and security-by-design principles.
• Identify, assess, and remediate application and infrastructure security vulnerabilities.
• Integrate security tools into development and CI/CD workflows.
• Implement and manage IAM solutions using OAuth 2.0 and OpenID Connect.
• Secure cloud environments across AWS, Azure, or GCP.
• Implement DevSecOps practices and integrate security controls into CI/CD pipelines.
• Support container and Kubernetes security initiatives.
• Monitor and improve network security, including firewalls, HTTPS, TLS, and related protocols.
• Apply Zero Trust principles and modern security frameworks.
• Collaborate with engineering, infrastructure, DevOps, and business stakeholders to address security requirements.
• Conduct security assessments, troubleshoot complex security issues, and recommend effective remediation strategies.

Required Skills

• Strong expertise in application security and secure coding.
• Strong knowledge of encryption techniques and security-by-design principles.
• In-depth understanding of OWASP Top 10.
• Hands-on experience with Snyk, Checkmarx, Fortify, SonarQube, or similar security tools.
• Experience with IAM, OAuth 2.0, and OpenID Connect.
• Strong understanding of network security, firewalls, HTTPS, TLS, and security protocols.
• Hands-on experience with AWS, Azure, or GCP security.
• Experience integrating security controls into DevSecOps and CI/CD pipelines.
• Knowledge of container security with Docker and Kubernetes.
• Understanding of Zero Trust architecture and modern security frameworks.
• Strong problem-solving, analytical, and troubleshooting skills.
• Excellent communication and stakeholder management skills.

Preferred Qualifications

• 5+ years of experience in application security, platform security, or security engineering.
• Security certifications such as CISSP, CEH, CSSLP, or equivalent are preferred.
• Experience securing containerized and Kubernetes-based environments.
• Experience designing and implementing Zero Trust security architectures.
• Knowledge of modern application, cloud, and infrastructure security frameworks.