Job Description:Overview:We are seeking a Platform Security Engineer to evolve our security platform function within a growing financial risk and advisory SaaS business. This role is ideal for an engineer who thrives in a hands-on environment and is motivated to build, scale, and mature security capabilities in a cloud-native platform.
You will join a small but growing team, designing and implementing security controls across cloud infrastructure, applications, and CI/CD pipelines. You will play a critical role in strengthening our security posture, ensuring compliance with SOC 2 requirements, and enabling engineering teams to build securely at scale.
What You'll Do
- Design, build, and implement security controls across Azure-based cloud infrastructure, containerized environments, and .NET applications, all at the platform level for broad coverage
- Ship security-focused capabilities and features that are highly leveraged across the development platform
- Implement and mature cloud security and application security practices, including secure architecture patterns
- Collaborate cross-functionally with Engineering, Compliance, and Information Security to embed security into the software development lifecycle (SDLC) by integrating security into CI/CD pipelines and developer workflows
- Implement cloud security scanning and posture management, to prevent misconfigurations, vulnerabilities, and drift across Azure environments
- Identify and address emerging risks related to AI/LLM usage across the SDLC
- Evaluate, implement, and operate Platform tooling, with a focus on automation and scalability
- Utilize AI to assist with all aspects of the engineering work: learning, investigations and debugging, creation and review of code
- Document Platform standards for secure coding
What Success Looks Like (First 12 Months)
- Reduced the burden of implementing secure coding for all Engineering teams
- Collaborated effectively with adjacent teams such as Information Security, Engineering, Governance/Risk/Compliance and IT
- Prioritized effectively operational work alongside project development
- Implemented effective security controls via code within CI/CD pipelines and development workflows
- Strengthened and matured cloud and application security practices across the organization
- Maintained and improved robust policy scanning and vulnerability management practices
- Automated and maintained audit control evidence to meet SOC 2 requirements
What You Bring
- 3+ years of experience in security engineering, with a strong foundation in software or cloud engineering
- Experience building applications within the full Software Development Life Cycle (initial coding through production deployment and operations)
- Experience integrating security into CI/CD pipelines and developer tooling
- Hands-on expertise in cloud security (Azure required; AWS familiarity preferred)
- Experience securing modern application stacks, including .NET applications and containerized environments
- Strong understanding of application security principles, including secure coding practices, threat modeling, and common vulnerabilities (OWASP Top 10)
- Strong problem-solving skills with the ability to operate tactically
- Experience with security tooling such as SAST, DAST, container scanning, and cloud security posture management (CSPM)
- Excellent collaboration and communication skills, particularly in working with engineering teams and Information Security
