Platform Security Engineer
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Platform Security Engineer: Securing cloud-native infrastructure, container platforms, CI/CD pipelines, and product services with an accent on security controls, vulnerability management, and compliance activities. Focus on implementing container image scanning, infrastructure-as-code security, secrets management, and shift-left practices in developer workflows.
Location: Hybrid role in Johannesburg, South Africa office
Company
Global standard for process intelligence and automation, trusted by over 10,000 organizations across 90 countries including Amazon, Coca-Cola, and Microsoft.
What you will do
- Implement and maintain security controls across the platform, including container orchestration policies, network segmentation, RBAC, and admission controls.
- Manage container image scanning, enforce policies in CI/CD and clusters, and ensure only vetted images reach production.
- Support IaC security scanning, secrets management, cloud posture management, and service mesh configurations like mTLS.
- Conduct vulnerability assessments, maintain tracking systems, and produce security posture reports.
- Implement security gates in CI/CD (SAST, SCA, dependency scanning) and participate in incident response.
- Contribute to compliance activities (SOC 2, ISO 27001), security reviews, and developer education on secure practices.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, IT, Engineering or equivalent
- 2+ years in security engineering, infrastructure security, DevSecOps, or related
- Hands-on with Azure or AWS
- Kubernetes security: pod security, RBAC, network policies, admission controllers
- IaC tools and CI/CD security (dependency scanning, SAST/SCA)
- Security frameworks (SOC 2, ISO 27001, CIS, OWASP)
- Scripting (Python, Bash, Go, PowerShell); programming (C#, JavaScript/TypeScript)
- Penetration testing concepts, vulnerability management, incident response
- Strong communication to explain security to teams
Culture & Benefits
- Hybrid working model blending at-home and in-office collaboration
- Flexible paid time off, global gratitude and recharge days
- Employee wellness programs, counseling, peer recognition
- Paid parental leave, invention/patenting assistance
- Community impact, volunteer time, intercultural learning
- Learning tools and global community support
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →