• We’re hiring a senior, hands-on DevSecOps/Platform Security Engineer to build and operate production security controls across our AWS and Kubernetes platform
• You’ll design and implement guardrails that make secure delivery the default—covering CI/CD security automation, software supply chain controls, and Kubernetes policy enforcement—while partnering closely with Platform/SRE and Security/GRC
• What You’ll Own: You’ll have real ownership over critical platform security capabilities including:
• CI/CD security automation and developer-facing security workflows (SAST/SCA, secrets scanning, IaC scanning, container scanning)
• Software supply chain controls (SBOM, artifact/image signing and verification, provenance and promotion workflows)
• Kubernetes policy enforcement and admission controls (policy-as-code) that encode platform security guardrails
• Co-own AWS security guardrails with Platform/SRE (IAM patterns, logging and detection, network and encryption baselines)
• Partner with Security/GRC on control interpretation and evidence needs; implements controls in engineering systems and pipelines
• Design, build, and maintain CI/CD security controls that scale across repositories and teams (reusable pipeline components, templates, and standards)
• Implement Kubernetes security architecture and guardrails (RBAC hardening, workload security baselines, admission policies, network policies, and safe multi-tenant patterns as applicable)
• Improve container security end-to-end: base-image strategy, vulnerability scanning, registry controls, image signing, and promotion workflows
• Operationalize vulnerability management with risk-based prioritization, measurable remediation SLAs, and dashboards/metrics (MTTR, exposure trends, top recurring root causes)
• Drive developer enablement: clear documentation, lightweight design reviews/threat modeling for high-impact changes, office hours, and high-signal guidance embedded in tooling
• Real Production Responsibility: This role builds and runs production secutiry systems
• You’ll ship code and infrastructure, not just recommendations
• You’ll own reliability and outcomes for the controls you build
• You’ll response to incidents and on-call rotation related to platform security controls and pipeline reliability (scope aligned with Platform/SRE)
• This role supports delivery into regulated environments and works closely with Security/GRC to implement engineering-owned controls and produce audit-ready evidence
• You’ll help translate requirements (for example, NIST SP 800-171 and CMMC expectations) into practical, automated guardrails within CI/CD, AWS, and Kubernetes

Benefits