Platform Security Engineer

The role

You will harden the security of systems powering the business and products. This role involves securing AWS infrastructure and the code base through application, cloud, and infrastructure security, detection engineering, and incident investigation.

What you will do

• Identify, assess, and help remediate security risks across AWS infrastructure, Terraform code, application architecture, and product code.
• Partner with engineering teams to design secure systems and incorporate security into workflows.
• Participate in security reviews of RFC and PRR documentation.
• Review application and infrastructure changes.
• Participate in external penetration tests and remediation planning.
• Help improve the penetration-testing program.
• Serve as the lead platform investigator during security and privacy incidents.
• Analyze application, cloud, identity, network, audit, and infrastructure telemetry.
• Translate investigation findings into containment actions and remediations.
• Contribute to the design, implementation, tuning, and maintenance of SIEM detection rules.

Required qualifications

• Hands-on experience in application security, cloud security, infrastructure security, or security-focused site reliability engineering.
• Experience securing production systems in AWS, including familiarity with identity, networking, logging, data protection, and common cloud attack paths.
• Strong working knowledge of Terraform and infrastructure-as-code security practices.
• The ability to assess security across both infrastructure and application layers.
• Experience reviewing application architecture or source code for security vulnerabilities and design weaknesses.
• Familiarity with common application, API, authentication, authorization, and data-security risks.
• Experience investigating complex technical events using application logs, cloud telemetry, audit trails, and other security data.
• Experience writing, tuning, or responding to SIEM detection rules.
• The ability to distinguish meaningful security signals from expected production behavior and noisy telemetry.
• Experience evaluating penetration-test findings and partnering with engineers on remediation.
• Strong scripting or software-development skills for building security tools, automations, and integrations.
• Demonstrated proficiency with agentic software development.

Nice to have

• Partnership with IT Security in building and supporting each security domain
• Technical project management experience
• Experience serving on a security or privacy incident-response team
• Experience leading technical investigations during security or privacy incidents
• SANS FOR509 training or certification
• Purple teaming experience
• Experience owning or coordinating an external penetration-testing program
• Experience with threat modeling, detection engineering, cloud forensics, or security automation

About the company

Outset invented a better way to do research using AI-powered user interviews. The company is backed by top Silicon Valley investors and serves global brands.