Platform Security Engineer

Description

The company builds compute power products: a mining pool, custom firmware, an ASIC brokerage desk, hashrate derivatives, and compute for CI and agents. Clients are located worldwide and the client base is expanding quickly, so the platform engineering team is growing.

This is a Senior Platform Security Engineer role on the Platform team, where you will own all security and compliance work within the team's scope while helping build and run production infrastructure. It suits someone who has worked on security and compliance inside a large organization and now wants the freedom to shape that function at a fast-growing startup. The work matters to someone who cares about protecting client data and keeping the service reliable.

You will report directly to the Chief Technology Officer. The role is fully remote, based in the U.S.A., with rare travel if needed.

Responsibilities

• Act as the day-to-day security adviser for the team you support, pushing security requirements in sprint planning, architecture and process reviews, product direction, design decisions, and work already in progress.
• Build and maintain centralized security testing and enforcement in CI/CD, covering SAST, DAST, software composition analysis (SCA), secrets scanning, and infrastructure-as-code (IaC) scanning.
• Run central cloud monitoring for vulnerabilities and configuration, and make ongoing patching and hardening part of daily engineering operations.
• Regularly audit application environments and development processes against internal and external requirements and security standard methods.
• Build and run cloud detection and response monitoring, and respond to incidents as a CIRT responder.
• Document controls, configurations, and decisions so the team keeps lasting institutional knowledge.
• Set and enforce policies and detections through device management tools such as FleetMDM.

Requirements

• A bachelor's degree in computer science, information technology, cybersecurity, or equivalent hands-on experience.
• 8+ years in DevOps, software engineering, or security engineering.
• Working knowledge of CI/CD platforms such as GitHub Actions, infrastructure-as-code tools such as Terraform, and configuration management such as Ansible.
• Proficiency in at least two of: Go, JavaScript, Rust, Python.
• Hands-on cloud security work in GCP, Alibaba, AWS, OVH, Hetzner, and/or Azure, covering identity and access management, containers, network security controls, encryption, logging, and monitoring.
• Ability to tighten access and controls, for example IAM policies.
• Hands-on experience with Kubernetes GitOps tools such as Flux or ArgoCD.
• Proven experience building automated application and infrastructure security testing, secrets management, and policy-as-code enforcement.
• Experience with penetration testing, either as a user of pentest tools or by running engagements.
• Strong scripting in Python or Bash for automation and integration.
• Experience supporting third-party attestations and audits such as SOC 2 Type 2 and ISO 27001, including preparation, implementation, and ongoing evidence collection.
• Experience running Zero Trust networks with Tailscale and Cloudflare WARP, including giving direct technical help to users, managing access policies, and fixing remote connectivity problems.
• Experience deploying, configuring, and administering a SIEM (Security Information and Event Management) system.
• Strong communication and governance skills. You can explain technical risk in business terms to technical and non-technical audiences, and argue for security without slowing delivery.
• The company does not accept unsolicited résumés from headhunters or agencies, and will not pay any third party without a signed agreement.

Conditions

The company uses AI tools to help review CVs, qualifications, and assignments, and to transcribe interviews, which are deleted within 15 days. AI tools support efficiency and consistency but do not make decisions; a member of the hiring team reviews each application at every step. You can raise questions or opt out of these tools in the application form's dedicated section.

Fully remote, based in the U.S.A., with rare travel if needed.