Senior / Staff Platform Security Engineer
# Senior / Staff Platform Security Engineer **Full Scale** · Philippines · `Remote` · `Full Time` 💼 **Уровень роли:** `Senior` 🕒 **Статус:** *Опубликовано: сегодня* · *Источник: Himalayas (JSON API)* --- ### Top Skills & Match 🎯 **Ключевой стек роли:** `[Platform-Security-Engineer]` `[Security-Engineer]` `[Cloud-Security-Engineer]` `[DevSecOps-Engineer]` `[Cybersecurity-Engineer]` `[Security-Platform-Engineer]` `[Staff-Security-Engineer]` `[Sr.-Infrastructure-Security-Engineer]` `[Senior-Platform-Engineer]` `[Senior-Cloud-Infrastructure-Security-Engineer]` `[Senior-Platform-Engineering]` --- ### About the Role This is a remote position Join one of the Philippines' fastest-growing tech companies! Open to Philippine-based candidates only. About Us Full Scale is a fully remote-first company that helps businesses build dedicated teams of skilled software engineers. We make it easier for growing companies to find, onboard, and retain high-performing software talent. About the Role We are seeking a hands-on Senior / Staff Platform Security Engineer who can build, implement, and validate security controls across Azure, AKS/Kubernetes, identity, CI/CD, cloud networking, and production environments. This role is best suited to a security engineer who has personally built and improved production controls. Candidates whose experience is primarily compliance, audit, SOC monitoring, architecture advisory, or people management without implementation ownership will not be a strong fit. Requirements - 6+ years of experience in cloud security, platform security, security engineering, infrastructure security, DevSecOps, SRE, DevOps, or related technical infrastructure roles. - At least 4 years of security-focused experience in cloud, platform, application, DevSecOps, or production security engineering. - Strong hands-on Azure security experience, including Entra ID, managed and workload identities, RBAC, PIM, Key Vault, Defender for Cloud, Sentinel or comparable tools, private networking, and least-privilege architecture. - Strong AKS/Kubernetes and container-security experience, including Kubernetes RBAC, workload identity, secrets, network policies, ingress controls, admission and policy controls, runtime protection, and workload isolation. - Practical experience implementing secure-SDLC controls: SAST, DAST, SCA/dependency scanning, secret scanning, IaC scanning, container scanning, vulnerability management, CVEs/CVSS, and CI/CD security gates. - Experience securing software and container supply chains, including image scanning, registries, image provenance or signing, base-image and dependency vulnerabilities, and secure deployment controls. - Strong network-security knowledge across WAFs, firewalls, segmentation, private endpoints, ingress and egress controls, attack-surface reduction, and zero-trust principles. - Experience with security monitoring, detection, and incident response using SIEM telemetry, identity events, cloud audit logs, investigation, and containment workflows. - Experience conducting threat modeling and security architecture reviews, and translating findings into a prioritized technical security roadmap. - Strong infrastructure-as-code experience using Terraform, Bicep, ARM, or comparable tools, including policy and security automation. - Strong communication skills and the ability to partner with engineering teams, explain security findings clearly, and drive remediation through completion. - Must be hands-on at the keyboard and able to describe security controls personally configured or implemented, including the tools used, architecture decisions made, problems encountered, and how the control was validated. Preferred Qualifications - Experience operating in a regulated or high-assurance environment and producing audit-ready technical evidence; HIPAA, SOC 2, ISO 27001, healthcare SaaS, fintech, or similar experience is valuable. - Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Log Analytics, CrowdStrike, Aikido, Vanta, New Relic, or comparable security platforms. - Experience with GitHub Actions, Azure DevOps, or comparable CI/CD platforms. - Familiarity with SAML, OIDC, SCIM, SSO, MFA, Conditional Access, and privileged-access management. - Experience in multi-tenant SaaS, .NET, Angular, or security automation using Python, Go, Bash, or PowerShell. - Certifications such as Azure Security Engineer Associate, CKS, CCSP, or CISSP, paired with demonstrated implementation experience. Benefits Why join us: - 100% remote work setup - Work from anywhere in the Philippines - Direct visibility and collaboration with the - High-impact role with significant technical ownership and autonomy - Opportunity to work on a cloud-native healthcare/SaMD platform - Exposure to modern Azure, AKS, Kubernetes, and cloud security technologies - Opportunity to work in a regulated, high-assurance environment - Collaboration with Engineering, Product, IT, Quality, and Compliance teams Originally posted on Himalayas
- Platform-Security-Engineer
- Security-Engineer
- Cloud-Security-Engineer
- DevSecOps-Engineer
- Cybersecurity-Engineer
- Security-Platform-Engineer
- Staff-Security-Engineer
- Sr.-Infrastructure-Security-Engineer
- Senior-Platform-Engineer
- Senior-Cloud-Infrastructure-Security-Engineer
- Senior-Platform-Engineering
Наблюдалась 2026-10-16, впервые 2026-10-16, источник — Himalayas (JSON API).