About the role
As a Platform Security Engineer, you are a developing security professional building expertise in securing cloud-native infrastructure, container platforms, CI/CD pipelines, and product services within the Platform Engineering organization. You take ownership of moderately complex security tasks with increasing autonomy while receiving guidance on architectural decisions and strategic direction. You implement and maintain security controls, build standardized security processes for engineering teams (vulnerability management, production security checks, secure build pipelines), support penetration testing and SOC operations for the product environment, contribute to compliance-related activities from the product security perspective, and help embed security practices into the developer experience through tooling and documentation. You are building depth and maturity in infrastructure security, application security, and shift-left practices needed to progress toward a senior platform security role.
Your contribution will be
You conduct vulnerability assessments of platform and product infrastructure components, coordinating remediation with SRE, Platform Engineering, and product service teams.
You maintain a vulnerability tracking system and produce regular reporting on security posture, remediation velocity, and risk trends for engineering leadership.
You implement and maintain security gates in CI/CD pipelines including dependency scanning, static application security testing (SAST), software composition analysis (SCA), and container image scanning.
You review code and other security remediations and provide development teams with security guidance.
You implement and maintain security controls across the platform, including container orchestration security policies, network segmentation, role-based access controls, and admission control mechanisms.
You manage container image scanning and enforce image policies in CI/CD pipelines and cluster admission, ensuring only vetted and signed images reach production environments.
You support infrastructure-as-code security scanning using policy-as-code tooling, flagging and remediating misconfigurations in infrastructure definitions before they reach production.
You maintain and improve secrets management workflows, ensuring rotation policies are enforced, access is audited, and no secrets are hardcoded or exposed in source code or configuration.
You support cloud security posture management across cloud environments, monitoring for drift, misconfiguration, and compliance deviations against established baselines.
You support service mesh security configuration including mutual TLS enforcement, authorization policies, and traffic policies that enforce zero-trust communication between platform services.
You contribute to tenant isolation and access control configuration for shared platform services, ensuring appropriate segmentation between teams and environments.
You participate in security incident response for platform and product-related events, supporting investigation, containment, evidence preservation, and documentation under guidance from the Senior Platform Security Engineer.
You support compliance-related activities from the product security perspective, providing evidence, documentation, and technical validation for audits and assessments (SOC 2, ISO 27001, CIS Benchmarks) without owning the compliance program itself.
Vulnerability report generation, security posture dashboards, and remediation workflow tooling.
You contribute to security reviews for infrastructure and product changes, providing feedback on pull requests and architecture proposals from a security perspective.
You explain security concepts and requirements to engineering teams, empowering them to build securely and understand the rationale behind security controls.
To be successful, we think you need
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or related field; or equivalent combination of education and experience.
2+ years of professional experience in security engineering, infrastructure security, DevSecOps, application security, or related field.
Hands-on experience with at least one major cloud platform (Azure or AWS).
Working knowledge of container orchestration security concepts in Kubernetes: pod security, role-based access control, network policies, admission controllers.
Experience with infrastructure-as-code tools and understanding of how to secure IaC workflows.
Understanding of CI/CD pipeline security: dependency scanning, SAST/SCA integration, artifact integrity.
Understanding of security frameworks and compliance standards (SOC 2, ISO 27001, CIS Benchmarks, OWASP).
Proficiency in scripting (Python, Bash, Go, or PowerShell) for security automation and tooling.
Proficiency with programing languages ( C#, Javascript/Typescript).
Experience with or exposure to penetration testing, vulnerability management workflows, and security incident response.
Strong communication skills with the ability to explain security findings and build standardized processes that engineering teams adopt. GitHub and/or Azure DevOps pipelines.
Valued certifications: Security+, CEH, GIAC GWAPT, BSCP etc.
What’s in it for you?
Nintex has a hybrid working model, enabling us to build culture, learn, and grow together. We intentionally connect and collaborate, while emphasizing flexibility with a blend of at-home and in-office work. This role is a hybrid role in our local Nintex office.
While our offerings differ from country to country, we offer our entire global workforce an array of exciting perks and benefits, including
Global Gratitude and Recharge Days
Flexible, paid time off policy
Employee wellness programs and counseling resources
Meaningful peer recognition and awards
Paid parental leave
Invention/patenting assistance
Community impact, paid volunteer time, and opportunities
Intercultural learning and celebration
Multiple tools through which to learn and grow, and an incredible global community
View more about our benefits here: https://www.nintex.com/wp-content/uploads/2023/01/Global-Perks-and-Benefits.pdf.
We are a 2023 Circle Back Initiative Employer – we commit to respond to every applicant.
