Senior Staff Platform Security Engineer

View full description

Requirements:

• Proven experience securing cloud-native applications in AWS, GCP, or Azure.
• Deep expertise in cloud security, containerization (Docker, Kubernetes), and securing cloud deployments.
• Strong software development and scripting skills (Python, Go, Bash, HCL).
• Solid understanding of security best practices across the Software Development Life Cycle (SDLC).
• Experience automating security infrastructure using Terraform, Ansible, or other Infrastructure-as-Code (IaC) tools.
• Strong problem-solving and analytical skills, with the ability to work autonomously in a fast-paced environment.
• Proficiency in network security, endpoint security, application security, and cloud security fundamentals.
• Ability to communicate complex security concepts effectively to both technical and non-technical stakeholders.
• Familiarity with modern attack techniques, offensive security methodologies, and defense strategies.

Responsibilities:

• Architect and implement security solutions that protect cloud-native and hybrid infrastructure.
• Partner with engineering teams to integrate security tooling into the SDLC, enabling seamless DevSecOps adoption.
• Conduct security architecture reviews, threat modeling, and risk assessments to identify and mitigate vulnerabilities.
• Automate security processes by developing integrations and security checks for machine configurations, container images, IAM policies, firewall rules, and cloud storage policies.
• Perform security design reviews for enterprise applications, ensuring compliance with security best practices and industry standards.
• Apply and enhance security assessment tools and processes, including penetration testing, vulnerability scanning, SIEM, DLP, and EDR.
• Lead threat modeling efforts to operationalize and automate security across system and software development lifecycles.
• Collaborate with internal engineering teams to tackle security challenges across the stack while fostering a security-first culture.
• Stay up to date with cybersecurity threats, trends, and industry standards to ensure Fivetran remains resilient against emerging risks.