Senior Platform Security Engineer
New
L
LuxorCloud security
This is a fully remote role based in U.S.A.Full-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years of experience in DevOps, software engineering, or security engineering
- Required Skills
- PythonCI/CDTerraformAnsibleGitHub Actions
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.
- 8+ years of experience in DevOps, software engineering, or security engineering.
- Proficiency with CI/CD platforms such as GitHub Actions, infrastructure as code tools such as Terraform, and configuration management such as Ansible.
- Proficiency in at least two of Go, JavaScript, Rust, and Python.
- Hands-on cloud security experience with GCP, Alibaba, AWS, OVH, Hetzner, and/or Azure, including IAM, containerization, network security controls, encryption, logging, and monitoring.
- Experience hardening access and controls, such as IAM Policy.
- Hands-on experience with Kubernetes GitOps, such as Flux or ArgoCD.
- Experience implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement.
- Familiarity with application penetration testing or experience conducting penetration testing engagements.
- Strong Python or Bash scripting skills for automation and integration.
- Experience supporting third-party attestations and audits, such as SOC 2 Type 2 or ISO 27001, including preparation, implementation, and ongoing evidence collection.
- Experience operating and maintaining Zero Trust network infrastructure using Tailscale and Cloudflare WARP, including user support, access policies, and remote connectivity troubleshooting.
- Experience deploying, configuring, and administering SIEM.
- Strong communication and governance skills, including translating technical risk for technical and non-technical audiences and advocating for security without slowing delivery.
Responsibilities
- Advise the supported team on security requirements during planning, architecture reviews, process discussions, product direction, design decisions, and active work.
- Build and maintain centralized automated security testing and enforcement in CI/CD, including SAST/DAST, SCA, secrets scanning, and IaC scanning.
- Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate patching and hardening into engineering operations.
- Audit application environments and development processes for compliance with internal and external requirements and security methodologies.
- Implement and maintain cloud detection and response monitoring, and serve as an incident CIRT responder.
- Document controls, configurations, and decisions.
- Enforce policies and detection using device management tooling such as FleetMDM.
View Full Description & ApplyYou'll be redirected to the employer's site
