Platform Security Engineer

Responsibilities

• Own application and infrastructure security across the platform from production launch through scaling
• Harden authentication patterns including OAuth, session handling, and multi-tenant access control
• Configure and maintain IAM policies, service accounts, and least-privilege access controls
• Secure data flows including file uploads, signed URLs, database access, and secrets management
• Set up and maintain security monitoring, logging, and alerting systems
• Build and maintain security tooling integrated into CI/CD pipelines including SAST, DAST, and dependency scanning
• Perform regular security assessments, dependency audits, and penetration testing
• Respond to security incidents and conduct root cause analysis
• Guide the engineering team on secure development practices and document security controls

Requirements

• Bachelor's degree or higher in computer science, information security, or a related field
• 7+ years of experience in application or infrastructure security roles
• Proven experience securing production web applications, preferably in Node.js/Next.js environments
• Deep familiarity with cloud security on GCP or equivalent platforms
• Strong understanding of OAuth, session security, and multi-tenant authorization patterns
• Experience with security scanning tools and integrating them into CI/CD workflows
• Experience with Terraform security hardening
• Strong verbal and written communication skills

Preferred Qualifications

• Penetration testing experience