Senior Security Engineer, Platform Engineering

Role summary

Key responsibilities

• Assess risks, harden platforms, and secure access for cloud and on-premises systems.
• Own the security standard for the Firmus Managed Kubernetes Service.
• Apply Kubernetes security practices including RBAC, admission controllers, pod security, auditing, and network policies.
• Implement Kubernetes supply chain security with image signing, vulnerability scanning, and policy enforcement.
• Secure infrastructure-as-code pipelines with automated security scanning.
• Automate patch management with testing before deployment.
• Use AI/ML-powered tools to identify security drift and anomalies.
• Collaborate on compliance checks, secrets management, identity and privileged access, encryption, monitoring, and incident response.
• Provide security awareness and guidance to engineering and operations teams.

Skills and experience

• A bachelor's degree in computer science or a related technical field is required.
• At least 7 years of experience in Platform Security, DevSecOps, or Site Reliability Engineering is required.
• Strong proficiency with CIS Benchmarks, NIST, ISO 27001, SOC 2, and OWASP Top 10 is required.
• Strong proficiency with Kubernetes security, networking, and supply chain security is required.
• Experience with tools such as Calico, kube-bench, Falco, Cosign, Trivy, Kyverno, Checkov, or Snyk is required.
• Experience with secrets management and identity or privileged access management tools is required.
• Experience with SSL/TLS certificate management is required.
• Scripting and programming skills in Bash, Python, or Go are required.
• Linux, networking, distributed storage, and English communication skills are required.
• Security certifications such as CISSP, CKS, OSCP, or cloud security certifications are required.

Bonus experience

• Experience in high-growth startups or regulated industries is a bonus.
• Experience with SOC 2 Type 2, ISO 27001, PCI DSS, or HIPAA is a bonus.
• Experience applying security principles to AI/ML operations environments is a bonus.

Location and employment

• The role is based in Sydney, Australia.
• The employment basis is full-time.

About Firmus Technologies