Platform Engineer
About the role
- Lead security tooling across application security, dependency and supply chain security, artifact and container security, cloud security posture, and policy-driven workflows
- Build, integrate, and operate tools such as GitHub Advanced Security, JFrog Xray, Prisma, Black Duck, Checkmarx, and similar platforms
- Design automation for vulnerability detection, dependency hygiene, patch planning, remediation tracking, and governed security workflows
- Partner with Security and Engineering to turn defined policies and best practices into practical controls, delivery pipeline guardrails, and developer-friendly workflows
- Improve the developer experience of security tooling by reducing noise, improving remediation clarity, and helping teams move faster without weakening security controls
- Drive security-focused initiatives and OKR efforts by defining technical approaches, breaking down work, and leading execution
- Support the ongoing health and improvement of security tooling, including internally built or AI-assisted security automation where appropriate
- Work with operational teams to support secure adoption of AI-enabled engineering tools and build controls around their use where needed
- 2+ years of experience in security engineering, platform engineering, development operations, site reliability engineering, or software engineering in production environments
- Strong programming or scripting skills in Go, Python, Bash, or similar languages
- Hands-on experience with security tooling and practices across areas such as code scanning, dynamic testing, software composition analysis, secret scanning, container or image scanning, artifact security, cloud security posture management, and policy enforcement
- Experience with or exposure to tools such as GitHub Advanced Security, JFrog Xray, Prisma, Black Duck, Checkmarx, Dependabot, Renovate, or similar security and dependency management platforms
- Strong understanding of vulnerability management, dependency management, and security controls within software delivery and developer workflows
- Familiarity with Kubernetes, containers, cloud platforms, Git-based workflows, and infrastructure as code concepts
- Ability to lead technical initiatives, run proofs of concept, and deliver solutions from ambiguous requirements
- Strong collaboration and communication skills, with the ability to translate security needs into practical engineering solutionsAI Skills/Knowledge:
- Experience using AI-assisted tools to improve engineering productivity, security workflows, and developer experience
- Familiarity with AI-assisted coding tools such as GitHub Copilot or Cursor for work such as code review, documentation, and test generation
- Experience applying AI to security use cases such as log analysis, threat investigation, remediation support, or security documentation
- Familiarity with large language model APIs, agent-based workflows, or internally built AI tooling, along with the ability to evaluate and enable these tools responsibly within engineering environments
- Understanding of security considerations for AI tools, including data leakage, prompt injection, shadow AI, and compliance with enterprise AI policies
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
