Platform Security Engineer

• Collaborating with Security teams to ensure operational efficiency by aligning activities with established controls and gathering evidence of compliance.
  
• Assisting Security Partners and Assurance teams in identifying areas for automation in evidence collection processes.
  
• Providing technical guidance to teams on implementing secure configurations for various components such as Network policies IAM API authentication and other Cloud elements.
  
• Assisting teams in designing secure Continuous Integration (CI) and Continuous Deployment (CD) pipelines.
  
• Supporting Security Partners in analyzing vulnerabilities and penetration test findings that may impact nonapplicationspecific aspects of the solution.
  
• Defining policies in code within assurance tooling.
  
• Conducting proof of concepts to evaluate new security tools and techniques.
  
• Collaborating with security engineers and penetration testers to develop abuse cases and threat models.
  

Requirements

MustHaves:

• Eagerness to learn and share new security and technical insights within a diverse community.
  
• Practical understanding of one or more security frameworks and standards.
  
• Background in cloud engineering with knowledge of cloud security requirements.
  
• Familiarity with the software development lifecycle CI/CD tools and conducting code reviews.
  
• Ability to express policies and automation through code.
  
• Contribution to Vulnerability Management processes including findings prioritization and recommended actions.
  
• Proficiency in research and analysis to identify opportunities for security automation.
  
• Capability to comprehend detailed security requirements and communicate effectively with both security and nonsecurity stakeholders to address everyday challenges.
  

NicetoHaves:

• Background in security and compliance within financial services.
  
• Familiarity with Google Cloud Platform and Kubernetes.
  
• Experience in designing controls for Software as a Service (SaaS) and Platform as a Service (PaaS) solutions.
  
• Proficiency in designing new software systems and integrations.
  
• Strong development skills in languages like Go Java or similar.
  
• Ability to design reports for stakeholders particularly regarding security posture and compliance.