Senior Platform Security Engineer - AI Resilience & Security Enhancements
F
Form3Financial technology
Here are the locations that we are looking to engage with contractors from. Please note, we are not looking to engage with contractors outside of these locations: Austria, Bulgaria, Croatia, Cyprus, Denmark, Estonia, Finland, Greece, Hungary, Italy, Latvia, Lithuania, Malta, Norway, Romania, Slovakia, Slovenia.ContractSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Required Skills
- PythonKubernetesGoCI/CDTerraform
Requirements
- Have strong hands-on experience in platform engineering, DevOps, SRE, DevSecOps, or platform security, with good security fundamentals.
- Have experience implementing security controls, rather than only reviewing systems or reporting security findings.
- Understand CI/CD and modern software delivery, including integrating security controls into engineering workflows.
- Understand software supply chain security, such as dependency security, secure builds, provenance, signing, or vulnerability management.
- Understand IAM, RBAC, and least privilege.
- Have experience with container security and practical Kubernetes knowledge.
- Be comfortable writing automation or tooling in a programming language; Go or Python experience is useful, with willingness to work in Go where needed.
- Have experience working with engineers to deliver practical security improvements into production systems.
- Terraform or other Infrastructure as Code experience is desirable.
- Experience with AWS, GCP, security automation or policy-as-code, container/runtime isolation or sandboxing, AI security, threat modelling, mTLS, PKI, cryptography, key management, or regulated and business-critical environments is desirable.
Responsibilities
- Design, evaluate, and implement controls for secure autonomous agent execution, including policy enforcement, permissions, sandboxing, execution isolation, and auditability.
- Evaluate and implement methods to detect vulnerable or unsafe code changes before merge, integrating security controls into CI/CD and pull request workflows.
- Explore security tooling and AI-assisted approaches to code security, assessing accuracy, false positives, bypasses, and usability.
- Strengthen production access with privileged-access controls, controlled access paths, least privilege, session controls, and auditability.
- Adapt engineering tooling and workflows to support safer production access.
- Strengthen CI/CD and software supply chain security through secure builds, dependency and container scanning, provenance, artefact signing, SBOMs, and policy enforcement.
- Build practical security automation and platform controls for engineering teams to use and maintain.
- Work with Form3 engineers on technical design, prototyping, and implementation.
- Produce technical documentation and handover material, and deliver changes using structured, low-risk practices while maintaining service availability.
View Full Description & ApplyYou'll be redirected to the employer's site
