Full-Time Senior Platform Security Engineer

The Internal Platform is a pivotal foundation for accelerating product development by offering a reliable, scalable, and self-service ecosystem. It supports the entire software lifecycle. The platform empowers development teams with autonomy in most cases, reducing dependency on the Internal Platform team.

Challenges: The Platform Security team faces challenges in integrating diverse tech stacks due to Docplanner's complexity. Scalability and reliability are crucial as the company grows.

Stakeholders:

• Global Security: Main external stakeholder for security initiatives, collaboration on compliance and risk management.
• PMS (Practice Management Systems) teams: Auditing, migration support and interpretation of global security and legal requirements.
• Core Internal Platform Team: Consulting on technical compliance, network standards, resolving issues.
• Experience Teams: Providing guidance on infrastructure-related application security, secure encryption, and CSP integrations.
• Legal: Ensuring alignment with data protection regulations, encryption standards, and locality requirements.

Impact on Mission:

• Ensuring platform compliance with industry best practices (ISO27001, C5, SOC2)
• Introducing security at every platform lifecycle stage
• Mitigating security threats proactively
• Optimizing system scalability and cost efficiency
• Developing, monitoring and maintaining Kubernetes clusters
• Ensuring high availability of services
• Supporting team members

Requirements:

• At least 5 years of security experience
• Extensive Kubernetes experience, including security implementation (CNI/Service Mesh)
• Vulnerability management expertise
• Hashicorp Vault knowledge
• Proficiency in Terraform and CI/CD tools
• AWS secure HA environment knowledge
• Network security services experience (AWS WAF/Cloudflare)
• Automation scripting skills (Bash, Go)
• Strong English communication skills (B2 level or higher)
• Ability to advocate for security best practices

What is the last date for applying to the job?

Which countries are accepted for this remote job?