Platform Security Engineer
Role Overview
• Secure‑by‑design applications and services
• Safe, reliable and automated releases (working towards full CI/CD)
• Strong detection, response and observability
• A culture where security is shared, understood and championed
• Google Cloud security fundamentals: IAM, VPC design, Cloud Armor, Secrets, KMS
• Cloudflare: WAF, Zero Trust, Access, DNS, Bot Management
• Infrastructure‑as‑Code security: Terraform, policy‑as‑code, secure pipelines
• Container & Kubernetes security: GKE, admission controls, image scanning, RBAC
• Experience mitigating real‑world security threats and vulnerabilities
• Understanding of DevSecOps best practice and secure SDLC
• Familiarity with CI/CD systems such as GitHub Actions and securing build pipelines
• Monitoring & alerting: Prometheus, Grafana, GCP Monitoring, SIEM concepts
• Knowledge of any of: PHP, JavaScript, Go (for reviewing and securing code)
• Experience with web servers & proxies: Apache, Nginx, Traefik, HAProxy
• Exposure to databases such as MySQL, MongoDB, Firebase, Elastic, Redis
• Event stack experience: Kafka, RabbitMQ, ActiveMQ, GCP Pub/Sub
• Network & request tracing including HTTP/1–3 and gRPC
• Experience running security workshops, threat modelling sessions or training
• Able to plan and manage your workload across multiple projects and priorities
• Comfortable collaborating, influencing and sharing knowledge with other teams
• Passionate about secure, scalable and complex distributed systems
• Confident communicating security concepts to both technical and non‑technical people
• Motivated to push security forward across the business, not just maintain it
• Great pay – and it’s always on time.
• No expectation of long hours. We respect your time.
• A personal development plan and regular 1:1s.
• Your choice of Mac, Linux or Windows Laptop
• Health Assured Employee Assistance Programme.
• A generous staff discount scheme.
• Flexible hours and no dress code.
• Mental health first aiders.
• A strong learning culture with support for external training.
• Cycle to work scheme.
• Eyecare vouchers.
• Company pension scheme.
• Employee referral bonuses.
Key Skills for This Role
Full Job Posting
Job description
Secure‑by‑design applications and services
Safe, reliable and automated releases (working towards full CI/CD)
Strong detection, response and observability
A culture where security is shared, understood and championed
Google Cloud security fundamentals: IAM, VPC design, Cloud Armor, Secrets, KMS
Cloudflare: WAF, Zero Trust, Access, DNS, Bot Management
Infrastructure‑as‑Code security: Terraform, policy‑as‑code, secure pipelines
Container & Kubernetes security: GKE, admission controls, image scanning, RBAC
Experience mitigating real‑world security threats and vulnerabilities
Understanding of DevSecOps best practice and secure SDLC
Familiarity with CI/CD systems such as GitHub Actions and securing build pipelines
Monitoring & alerting: Prometheus, Grafana, GCP Monitoring, SIEM concepts
Knowledge of any of: PHP, JavaScript, Go (for reviewing and securing code)
Experience with web servers & proxies: Apache, Nginx, Traefik, HAProxy
Exposure to databases such as MySQL, MongoDB, Firebase, Elastic, Redis
Event stack experience: Kafka, RabbitMQ, ActiveMQ, GCP Pub/Sub
Network & request tracing including HTTP/1–3 and gRPC
Experience running security workshops, threat modelling sessions or training
Able to plan and manage your workload across multiple projects and priorities
Comfortable collaborating, influencing and sharing knowledge with other teams
Passionate about secure, scalable and complex distributed systems
Confident communicating security concepts to both technical and non‑technical people
Motivated to push security forward across the business, not just maintain it
Great pay – and it’s always on time.
No expectation of long hours. We respect your time.
A personal development plan and regular 1:1s.
Your choice of Mac, Linux or Windows Laptop
Health Assured Employee Assistance Programme.
A generous staff discount scheme.
Flexible hours and no dress code.
Mental health first aiders.
A strong learning culture with support for external training.
Cycle to work scheme.
Eyecare vouchers.
Company pension scheme.
Employee referral bonuses.
About Gear4music
Online retailer of musical instruments, music equipment, and audio-visual gear serving beginners, musicians, and professionals worldwide.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Gear4music
Spanish Speaking Customer Service Advisor FTC
York, GBR
Returns Operative (FTC)
York, GBR
Weekend Security Guard
Sherburn in Elmet, GBR
Cleaner
York, GBR
Customer Service & Sales Advisor (FTC)
York, GBR
Warehouse Operative FTC
York, GBR
Cleaner
York, GBR
Spanish Speaking Customer Service Advisor FTC
York, GBR
User Experience Lead
York, GBR