Senior Platform Security Engineer - AI Resilience & Security Enhancements
New
F
Form3Payments security
Location: 100% Remote (Europe*) ... Here are the locations that we are looking to engage with contractors from. Please note, we are not looking to engage with contractors outside of these locations: Austria, Bulgaria, Croatia, Cyprus, Denmark, Estonia, Finland, Greece, Hungary, Italy, Latvia, Lithuania, Malta, Norway, Romania, Slovakia, Slovenia.ContractSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Required Skills
- PythonKubernetesGoCI/CD
Requirements
- Have strong hands-on experience in Platform Engineering, DevOps, SRE, DevSecOps or Platform Security, with good security fundamentals.
- Have experience implementing security controls, rather than only reviewing systems or reporting security findings.
- Understand CI/CD and modern software delivery, including integrating security controls into engineering workflows.
- Understand software supply chain security, including areas such as dependency security, secure builds, provenance, signing or vulnerability management.
- Understand IAM, RBAC and least privilege.
- Have experience with container security and practical Kubernetes knowledge.
- Be comfortable writing automation or tooling in a programming language; Go or Python experience is useful, with willingness to work in Go where needed.
- Have experience working with engineers to deliver practical security improvements into production systems.
- Have good communication and documentation skills.
- Terraform or other Infrastructure as Code experience is desirable.
- Experience with AWS, GCP or other public cloud platforms is desirable.
- Security automation or policy-as-code experience is desirable.
- Experience with container/runtime isolation or sandboxing is desirable.
- Experience securing AI agents or AI-enabled engineering tools, using LLMs for security analysis or automation, or threat modelling is desirable.
- Knowledge of mTLS, PKI, cryptography or key management, or experience in regulated, financial or business-critical environments, is desirable.
Responsibilities
- Design and implement controls for secure autonomous agent execution, including policy enforcement, permissions, sandboxing, execution isolation and auditability.
- Integrate detection for vulnerable or unsafe code changes into CI/CD and pull request workflows.
- Evaluate security tooling and AI-assisted code security approaches, considering accuracy, false positives, bypasses and usability.
- Strengthen production access with privileged-access controls, controlled access paths, least privilege, session controls and auditability.
- Adapt engineering tooling and workflows to support safer production access.
- Improve CI/CD and software supply chain security through secure builds, dependency and container scanning, provenance, artefact signing, SBOMs and policy enforcement.
- Build security automation and platform controls that engineering teams can use and maintain.
- Work with Form3 engineers on technical design, prototyping and implementation.
- Contribute to wider security engineering work and collaborate with Form3 security specialists where deeper domain knowledge is needed.
- Produce technical documentation and handover material, and deliver changes using structured, low-risk practices while maintaining service availability.
View Full Description & ApplyYou'll be redirected to the employer's site
