Senior / Staff Platform Security Engineer

Requirements

• 6+ years of experience in cloud security, platform security, security engineering, infrastructure security, DevSecOps, SRE, DevOps, or related technical infrastructure roles.
  
• At least 4 years of security-focused experience in cloud, platform, application, DevSecOps, or production security engineering.
  
• Strong hands-on Azure security experience, including Entra ID, managed and workload identities, RBAC, PIM, Key Vault, Defender for Cloud, Sentinel or comparable tools, private networking, and least-privilege architecture.
  
• Strong AKS/Kubernetes and container-security experience, including Kubernetes RBAC, workload identity, secrets, network policies, ingress controls, admission and policy controls, runtime protection, and workload isolation.
  
• Practical experience implementing secure-SDLC controls: SAST, DAST, SCA/dependency scanning, secret scanning, IaC scanning, container scanning, vulnerability management, CVEs/CVSS, and CI/CD security gates.
  
• Experience securing software and container supply chains, including image scanning, registries, image provenance or signing, base-image and dependency vulnerabilities, and secure deployment controls.
  
• Strong network-security knowledge across WAFs, firewalls, segmentation, private endpoints, ingress and egress controls, attack-surface reduction, and zero-trust principles.
  
• Experience with security monitoring, detection, and incident response using SIEM telemetry, identity events, cloud audit logs, investigation, and containment workflows.
  
• Experience conducting threat modeling and security architecture reviews, and translating findings into a prioritized technical security roadmap.
  
• Strong infrastructure-as-code experience using Terraform, Bicep, ARM, or comparable tools, including policy and security automation.
  
• Strong communication skills and the ability to partner with engineering teams, explain security findings clearly, and drive remediation through completion.
  
• Must be hands-on at the keyboard and able to describe security controls personally configured or implemented, including the tools used, architecture decisions made, problems encountered, and how the control was validated.