Platform Security Engineer

You will work closely with engineering, platform, and operations teams to integrate security into cloud infrastructure, CI/CD pipelines, containerized workloads, and AI/ML platforms. The successful candidate will combine hands-on technical expertise with a proactive approach to threat detection, vulnerability management, and security automation., Cloud & Infrastructure Security:

• Design, implement, and maintain security controls for Kubernetes, cloud infrastructure, and workloads.
• Develop and enforce security standards, policies, and hardening baselines for cloud and on-premises environments.
• Review infrastructure architectures and perform security assessments to identify risks and recommend mitigations.
• Manage identity and access controls, including RBAC, IAM, secrets management, and privileged access.
• Conduct threat modelling and security reviews for new applications, services, and infrastructure changes.
• Integrate security controls into CI/CD pipelines, including SAST, DAST, dependency scanning, container image scanning, and secrets detection.

Vulnerability & Risk Management:

• Lead vulnerability identification, prioritization, remediation, and reporting activities across infrastructure and applications.
• Develop processes for continuous security assessment and compliance monitoring.
• Track security metrics and drive remediation efforts with engineering teams.

Detection & Response:

• Develop and maintain security monitoring, alerting, and detection capabilities.
• Investigate security incidents, perform root cause analysis, and coordinate remediation activities.
• Create and maintain incident response playbooks and procedures.

Security Automation:

• Build automation to improve security monitoring, compliance validation, vulnerability management, and incident response workflows.
• Leverage Infrastructure as Code and policy-as-code frameworks to enforce security standards at scale.

• Expertise in Security Engineering, Cloud Security, DevSecOps, or Infrastructure Security.
• In depth knowledge of cloud security principles and experience securing Kubernetes environments.
• Experience with container security, workload protection, and cloud-native security tooling.
• Hands-on experience with vulnerability management platforms and security assessment methodologies.
• Familiarity with CI/CD security controls, secure software development practices, and supply chain security.
• Experience with SIEM, logging, monitoring, and security analytics platforms.
• Strong scripting and automation skills using Python, Bash, or similar languages.

Preferred Qualifications:

• Experience securing AI/ML or GPU-based infrastructure.
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, NIST CSF, CIS Benchmarks, or PCI DSS.
• Experience with threat modelling, penetration testing, or red team engagements.

Era4 is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.