> Markdown version of [/jobs/ext/3921938-software-engineer-platform-security](https://www.wearedevelopers.com/jobs/ext/3921938-software-engineer-platform-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Software Engineer - Platform Security

- **Company:** FriendliAI Corp.
- **Location:** San Francisco, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Amazon Web Services, Computing Platforms, Cloud Computing, Cyber Security, Computer Engineering, Software Debugging, Distributed Systems, Identity and Access Management, Key Management, Network Control, Network Segmentation, Policy as Code, Data Logging, Cloud Platform System, Multi-Cloud, Amazon Virtual Private Cloud (VPC), Backend, Kubernetes, Information Technology, Terraform, Serverless Computing
- **Published:** October 26, 2026
- **Apply:** https://startup.jobs/software-engineer-platform-security-friendliai-10550907

## About the Role

* 5+ years securing cloud-native platforms with a focus on distributed systems and multi-tenancy.
 * Bachelor's or Master's degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent.
 * Strong hands-on experience with AWS (IAM, VPC/networking, logging/monitoring, …) and Kubernetes/container security.
 * Proficiency with Terraform and Helm.
 * Experience building or operating runtime detections for containers/functions.
 * Strong technical background in backend systems, cloud infrastructure, or AI tooling

 * Clear written and verbal communication; ability to translate pricing/business rules into robust systems.

Preferred Experience

 * Knative or similar serverless-on-K8s frameworks.
 * Container hardening and sandboxing.
 * Policy-as-code and admission policy design at scale.
 * eBPF-based observability, detections, and signal tuning.
 * Multi-cloud exposure and cross-cloud identity approaches.
 * Hands-on contributions to SOC 2 / HIPAA control automation and audit evidence pipelines.

## Description

* Design and implement the security architecture for a Kubernetes-based, multi-tenant serverless platform.
 * Build guardrails as code using Terraform and Helm.
 * Establish network segmentation and service-mesh policy.
 * Develop secrets and key management patterns.
 * Implement runtime detections for containerized workloads.
 * Design and roll out IAM & workload identity management.
 * Threat model new features and changes to the overall platform.
 * Collaborate with engineering to debug production issues, lead post-incident hardening, and automate evidence for compliance controls.