Platform Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps.

Our partner is looking for a Platform Security Engineer based in United Kingdom.

We are looking for a senior Platform Security Engineer to strengthen cloud security, platform reliability, and secure engineering practices in a fully remote European environment.

In this individual contributor role, you will join a platform engineering team focused on building reliable infrastructure and improving the developer experience.

You will design and implement secure-by-default workflows that protect sensitive personal and compensation data across multiple countries.

Your work will span cloud infrastructure, Kubernetes, CI/CD security, identity management, observability, and disaster recovery.

You will collaborate closely with engineers to embed security into everyday workflows without compromising delivery speed or usability.

By combining hands-on engineering, automation, and pragmatic risk management, you will help build a resilient platform where security becomes the easiest path.

This is an opportunity to shape platform security strategy while delivering measurable improvements in a collaborative, remote-first team.

Accountabilities

• As a Platform Security Engineer, you will take ownership of production security improvements while contributing to the broader platform engineering roadmap.
• You will focus on practical solutions that improve security, reliability, and developer productivity.
• Design and implement secure-by-default workflows for production operations, ensuring access is controlled, auditable, and straightforward for engineers to use.
• Strengthen cloud security practices, including identity and access management, SSO/OIDC, secrets management, and least-privilege access controls.
• Secure and operate production Kubernetes environments, implementing appropriate workload security and access restrictions.
• Integrate security checks and automated scanning into CI/CD pipelines to identify and resolve vulnerabilities early in the delivery process.
• Improve infrastructure-as-code practices, developer tooling, and self-service guardrails to make secure engineering workflows easy to adopt.
• Manage cloud networking and edge protection, including VPC boundaries, DNS, TLS, load balancing, CDN, and Web Application Firewall (WAF) configuration.
• Define and improve security priorities, response targets, incident workflows, threat modeling, and post-incident reviews.
• Strengthen platform reliability through service-level objectives (SLOs), observability, on-call practices, and incident troubleshooting.
• Design, implement, and regularly test backup, restoration, and disaster recovery procedures to support business continuity.
• Lead resilience exercises and refine recovery playbooks to ensure recovery objectives are clear and achievable.
• Use AI-powered engineering tools and automation, including agents and Model Context Protocol (MCP) integrations, to accelerate engineering work and improve platform operations.
• Collaborate with platform engineers and engineering leadership to balance risk, delivery speed, developer experience, and operational stability.
• Document technical decisions, communicate trade-offs clearly, and use feedback and adoption metrics to continuously improve platform security.

Requirements

• You should be a hands-on platform engineer with strong production security expertise and the ability to turn security requirements into practical, measurable improvements.
• Evidence of what you have built, improved, and influenced is more important than a specific number of years of experience.
• Demonstrated ownership of application or platform security in a production cloud environment, with clear examples of impact.
• Strong cloud security fundamentals, including IAM, SSO/OIDC, secrets management, identity integrations, and least-privilege access.
• Solid platform engineering experience across infrastructure as code, CI/CD pipelines, security automation, and observability.
• Proven experience operating Kubernetes in production, including workload security and access controls.
• Practical knowledge of cloud networking and edge technologies, including VPCs, DNS, TLS, load balancing, CDNs, and WAFs.
• Experience with reliability engineering practices such as SLOs, on-call operations, threat modeling, incident coordination, and postmortems.
• Hands-on experience designing and testing backup, restore, and disaster recovery procedures.
• A product-oriented approach to platform engineering, with attention to developer experience, adoption, usability, and measurable outcomes.
• Ability to write and review code to diagnose and resolve problems directly rather than simply identify or report them.
• Experience using AI tools to accelerate engineering tasks and integrate AI-assisted capabilities into platform workflows.
• Fluent English, with the ability to communicate technical decisions, document trade-offs, and collaborate effectively in a remote-first environment.

Nice to have

• Experience with ISO 27001, SOC 2, or DORA compliance requirements.
• Background in fintech, payroll, or other environments handling regulated or sensitive data.
• Knowledge of detection engineering, security information and event management (SIEM), or related security monitoring practices.
• Experience with PostgreSQL operations and safe database schema migrations.
• Familiarity with Elixir or the ability to learn and work with functional programming languages.
• Awareness of cloud cost optimization and FinOps practices.
• Relevant certifications, although practical experience and demonstrated outcomes are prioritized.

Benefits

• Competitive compensation: Annual gross base salary of €50,000–€67,000, depending on experience and location.
• Equity participation: Stock options through an equity incentive plan, with no bonus or commission component.
• Fully remote work: Remote-first working arrangements across Europe, with interviews generally scheduled between 10:00 and 16:00 CET.
• Workstation and onboarding: A MacBook and a €500 onboarding budget to support your setup during your first months.
• Professional development: A €1,000 annual FlexBudget for professional development and remote-work enablement.
• Health insurance: Health insurance plans, with options to add family members and adjust coverage depending on the country.
• Paid time off: 25 days of paid vacation annually, plus three additional caring days for side projects supporting positive social causes.
• Family-friendly policies: Two additional paid weeks on top of the legal maximum parental leave, plus your birthday and your children's birthdays off.
• Team connection: In-person team gatherings at least once a year.
• Inclusive culture: A workplace that values diversity, individuality, non-linear career paths, and evidence-based assessment.
• Permanent employment: A permanent contract and the opportunity to influence platform security, infrastructure, and developer experience.