Platform Engineer
This position is 100% remote anywhere in the US
Overview:
We are hiring a Platform Engineer to lead security tooling and enablement within Platform Engineering for our global SaaS environment. This role focuses on building the platforms, automation, and guardrails that help engineering teams adopt security requirements in practical, scalable ways across the software development lifecycle.
You will work at the intersection of Security, Platform Engineering, and development teams. In our model, the Security team defines policies, standards, and best practices, and Platform Engineering enables and enforces them through engineering solutions. This is an individual contributor role for an engineer who can lead proofs of concept, help drive initiatives, and turn complex problems into clear, executable solutions.
What you will do:
Lead security tooling across application security, dependency and supply chain security, artifact and container security, cloud security posture, and policy-driven workflows
Build, integrate, and operate tools such as GitHub Advanced Security, JFrog Xray, Prisma, Black Duck, Checkmarx, and similar platforms
Design automation for vulnerability detection, dependency hygiene, patch planning, remediation tracking, and governed security workflows
Partner with Security and Engineering to turn defined policies and best practices into practical controls, delivery pipeline guardrails, and developer-friendly workflows
Improve the developer experience of security tooling by reducing noise, improving remediation clarity, and helping teams move faster without weakening security controls
Drive security-focused initiatives and OKR efforts by defining technical approaches, breaking down work, and leading execution
Support the ongoing health and improvement of security tooling, including internally built or AI-assisted security automation where appropriate
Work with operational teams to support secure adoption of AI-enabled engineering tools and build controls around their use where needed
What we are looking for:
2+ years of experience in security engineering, platform engineering, development operations, site reliability engineering, or software engineering in production environments
Strong programming or scripting skills in Go, Python, Bash, or similar languages
Hands-on experience with security tooling and practices across areas such as code scanning, dynamic testing, software composition analysis, secret scanning, container or image scanning, artifact security, cloud security posture management, and policy enforcement
Experience with or exposure to tools such as GitHub Advanced Security, JFrog Xray, Prisma, Black Duck, Checkmarx, Dependabot, Renovate, or similar security and dependency management platforms
Strong understanding of vulnerability management, dependency management, and security controls within software delivery and developer workflows
Familiarity with Kubernetes, containers, cloud platforms, Git-based workflows, and infrastructure as code concepts
Ability to lead technical initiatives, run proofs of concept, and deliver solutions from ambiguous requirements
Strong collaboration and communication skills, with the ability to translate security needs into practical engineering solutions
AI Skills/Knowledge:
Experience using AI-assisted tools to improve engineering productivity, security workflows, and developer experience
Familiarity with AI-assisted coding tools such as GitHub Copilot or Cursor for work such as code review, documentation, and test generation
Experience applying AI to security use cases such as log analysis, threat investigation, remediation support, or security documentation
Familiarity with large language model APIs, agent-based workflows, or internally built AI tooling, along with the ability to evaluate and enable these tools responsibly within engineering environments
Understanding of security considerations for AI tools, including data leakage, prompt injection, shadow AI, and compliance with enterprise AI policies
Preferred Skills
Exposure to compliance-driven environments such as SOC 2 or similar frameworks
Experience supporting AI-assisted or internally built security automation
Familiarity with modern software delivery environments where security tooling must balance risk reduction with engineering velocity
#LI-SR1