Platform Security Engineer
New
S
SupabaseCloud Infrastructure
We hire globally. We believe you can do your best work from anywhere.Full-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Required Skills
- AWSKubernetes
Requirements
- Senior-level experience in platform security, cloud security, infrastructure security, container security, or security engineering.
- Deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals.
- Experience working in large cloud environments, multi-cluster Kubernetes setups, developer platforms, or high-scale infrastructure teams.
- Ability to reason clearly about identity, networking, workload isolation, runtime security, secrets, supply chain, and blast radius.
- Strong communication skills for a written, asynchronous environment.
- Experience managing security efforts across complex projects with various stakeholders.
- Ability to navigate ambiguity and prioritize effectively in a fast-paced environment.
- Preference for building guardrails, automation, and secure defaults.
Responsibilities
- Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure.
- Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems.
- Partner closely with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns.
- Improve Kubernetes and container security across areas like workload isolation, RBAC, admission control, secrets, network policy, and runtime hardening.
- Assess container runtime and Linux isolation risks, including capabilities, seccomp/AppArmor, namespaces, cgroups, and container escape scenarios.
- Strengthen AWS security posture across IAM, account boundaries, network controls, logging, detection, encryption, and service configuration.
- Build scalable mechanisms such as automation, guardrails, paved paths, detection, secure defaults, and review frameworks.
- Distinguish between theoretical risk and material platform risk to prioritize security efforts effectively.
View Full Description & ApplyYou'll be redirected to the employer's site
