Senior Security Platform Engineer - Secure Delivery

New

AshbyCybersecurity software

Remote - European Union; Secondary Locations: United KingdomFull-TimeSenior

SalaryEMEA Senior: Base Salary €108K – €145K • Offers Equity; UK Senior: Base Salary £95K – £125K • Offers Equity

Apply NowOpens the employer's application page

Job Details

Experience building and operating CI/CD, developer tooling, or infrastructure automation used by other engineers.
Ability to write maintainable production automation in TypeScript, Python, Go, or a comparable language.
Experience with GitHub Actions or comparable CI/CD systems is relevant.
Experience with Terraform, containers, and cloud controls is relevant.
Ability to explain failure modes in systems you have shipped and use security evidence to make rollout decisions.
Experience applying AI in engineering and checking its outputs and permissions.
Supply-chain and scanner experience is useful; familiarity with a specific scanner is not required.
Willingness to own reliability, tuning, and operation of delivery tooling after launch.

Deploy, configure, integrate, and tune static analysis, dependency, secret, container, and Infrastructure as Code scanning in CI/CD workflows.
Inventory production repositories and delivery paths, including prompts and model configuration, and distinguish scanner coverage from application-specific AI behavior tests.
Implement agreed warning and blocking policies, starting checks in report-only mode where appropriate.
Build self-service exception workflows with documented rules, owners, justifications, expiry dates, and audit trails.
Build automation and AI-assisted workflows to enrich findings, propose fixes, and support Product Engineering triage.
Make coverage, integration failures, finding age by risk, remediation timing, false blocks, build delays, and bypasses visible.
Connect useful delivery-security telemetry to GRC evidence and record mitigations separately from completed fixes.
Work with Infrastructure on cloud-posture monitoring, critical-misconfiguration alerts, and bounded remediation automation.
Extend delivery foundations into shared-image hardening and artifact provenance.

View Full Description & ApplyYou'll be redirected to the employer's site