Platform Security Engineer

About the company

• Fully remote European environment.
• Platform engineering team focused on building reliable infrastructure and improving the developer experience.

Responsibilities

• Design and implement secure-by-default workflows for production operations.
• Strengthen cloud security practices, including IAM, SSO/OIDC, secrets management, and least-privilege access controls.
• Secure and operate production Kubernetes environments, implementing workload security and access restrictions.
• Integrate security checks and automated scanning into CI/CD pipelines.
• Improve infrastructure-as-code practices, developer tooling, and self-service guardrails.
• Manage cloud networking and edge protection, including VPC boundaries, DNS, TLS, load balancing, CDN, and WAF configuration.
• Define and improve security priorities, response targets, incident workflows, threat modeling, and post-incident reviews.
• Strengthen platform reliability through SLOs, observability, on-call practices, and incident troubleshooting.
• Design, implement, and regularly test backup, restoration, and disaster recovery procedures.
• Lead resilience exercises and refine recovery playbooks.
• Use AI-powered engineering tools and automation, including agents and MCP integrations.
• Collaborate with platform engineers and engineering leadership.
• Document technical decisions and communicate trade-offs clearly.

Requirements

• Demonstrated ownership of application or platform security in a production cloud environment.
• Strong cloud security fundamentals: IAM, SSO/OIDC, secrets management, identity integrations, least-privilege access.
• Solid platform engineering experience across infrastructure as code, CI/CD pipelines, security automation, and observability.
• Proven experience operating Kubernetes in production, including workload security and access controls.
• Practical knowledge of cloud networking and edge technologies: VPCs, DNS, TLS, load balancing, CDNs, WAFs.
• Experience with reliability engineering practices: SLOs, on-call operations, threat modeling, incident coordination, postmortems.
• Hands-on experience designing and testing backup, restore, and disaster recovery procedures.
• Product-oriented approach to platform engineering.
• Ability to write and review code to diagnose and resolve problems.
• Experience using AI tools to accelerate engineering tasks.
• Fluent English.
• Nice to have: ISO 27001, SOC 2, or DORA compliance; fintech/payroll background; detection engineering or SIEM; PostgreSQL operations and safe schema migrations; Elixir or functional programming; FinOps practices; relevant certifications.

Conditions

• Annual gross base salary of €50,000–€67,000, depending on experience and location.
• Equity participation: stock options through an equity incentive plan, with no bonus or commission component.
• Fully remote work.