Platform & Security Engineer

Chut.app builds AI-powered SaaS solutions for professional advisors and SMEs in regulated markets across Belgium, Luxembourg and France.

Our infrastructure is European by design and self-managed rather than outsourced entirely to a hyperscaler. We operate with a small, experienced team, real production workloads and serious responsibilities around security, privacy and compliance.

We are looking for a Platform & Security Engineer who wants to take end-to-end ownership of the environment on which our products and customers depend.

Your mission

You own the platform from infrastructure and deployment through to security, observability and audit evidence.

Your work ensures that our commitments around European data sovereignty, availability, security and regulatory compliance are reflected in the way the platform is designed and operated.

This is a hands-on engineering role with substantial responsibility. You will design solutions, implement them, document them and help operate them in production.

Your responsibilities

• Operate and harden self-managed Linux infrastructure.
• Manage provisioning, networking, storage, backups and disaster recovery.
• Build and maintain containerised deployment environments.
• Secure the container image supply chain and registry.
• Implement reliable and zero-downtime release processes.
• Develop and maintain CI/CD pipelines.
• Manage infrastructure as code and eliminate undocumented or manually configured servers.
• Operate GPU workloads for AI inference and model serving.
• Monitor GPU capacity, availability, performance and cost.
• Design and maintain strong multi-tenant isolation.
• Implement data segregation, key management and blast-radius controls.
• Manage secrets, identities, access permissions and privileged accounts.
• Coordinate vulnerability management and remediation.
• Follow up on penetration-test findings.
• Contribute to incident preparation, detection, response and recovery.
• Translate GDPR, NIS2 and EU AI Act requirements into practical technical controls.
• Implement logging, retention, traceability and audit evidence.
• Develop observability across infrastructure, applications and security events.
• Help design a realistic and sustainable on-call approach.

• You have solid professional experience in platform engineering, DevOps, SRE, infrastructure engineering or cloud security.
• You have strong hands-on knowledge of Linux systems and networking.
• You have experience running containerised production environments.
• You are familiar with CI/CD and infrastructure-as-code principles.
• You understand identity and access management, secrets management, encryption and key management.
• You can design systems with availability, recoverability and security in mind.
• You understand the risks associated with multi-tenant SaaS platforms.
• You are comfortable investigating incidents and resolving production issues.
• You document decisions, configurations and operating procedures clearly.
• You are able to work independently and take ownership from design through implementation and operation.
• You communicate clearly with technical and non-technical stakeholders.
• You have a professional working knowledge of English.

Valuable additional experience

Experience in one or more of the following areas is an advantage:

• Self-managed or sovereign European infrastructure
• Kubernetes or comparable container orchestration
• GPU infrastructure, inference or model serving
• Security monitoring and incident response
• Backup and disaster-recovery testing
• Regulated SaaS environments
• GDPR, NIS2, ISO 27001 or EU AI Act readiness
• Audit logging, evidence collection and control documentation
• Infrastructure serving customers across multiple European countries

Pulled from the full job description

• Company computer
• Cell phone reimbursement
• Additional leave
• Food allowance
• Hospitalization insurance
• Work from home, * A key engineering role in an ambitious European AI company.
• End-to-end ownership of a business-critical platform.
• The opportunity to shape infrastructure, security and operational standards from an early stage.
• Close collaboration with the technical leadership and product team.
• Meaningful work on European data sovereignty and regulated-market technology.
• A hybrid working arrangement in Belgium or Luxembourg.
• A competitive compensation package with relevant benefits.
• A pragmatic environment with short decision lines and substantial technical responsibility.