platform security engineer

Agoda

<div>
 
 About Agoda
 
 
 
 At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
 
 
 Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
 
 
 No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you&rsquo;re ready to begin your best journey and help build travel for the world, join us.
 
 
 We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript.
 
 
 
 Key Responsibilities:
 
 
 
 Secure Cloud Deployment:
 
 
 <ul>
 <li>
 Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.
 </li>
 <li>
 Kubernetes &amp; GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem.
 </li>
 <li>
 Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.
 </li>
 <li>
 Security Automation &amp; Tooling: Design and build security tooling and services using Go and TypeScript.
 </li>
 <li>
 Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.
 </li>
 <li>
 Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.
 </li>
 <li>
 Threat Detection &amp; Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.
 
 
 </li>
 </ul>
 
 Required Skills &amp; Experience:
 
 
 
 <ul>
 <li>
 8+ years of experience in security engineering, cloud security, or platform engineering roles.
 </li>
 <li>
 Hands-on experience securing production workloads in AWS and GCP.
 </li>
 <li>
 Strong experience designing and securing Infrastructure as Code using Terraform.
 </li>
 <li>
 Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.
 </li>
 <li>
 Strong programming skills in Go and TypeScript, with Python used for automation where appropriate.
 </li>
 <li>
 Experience embedding security controls into CI/CD pipelines.
 </li>
 <li>
 Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security
 </li>
 <li>
 Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate
 </li>
 <li>
 Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).
 </li>
 <li>
 Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.
 
 
 </li>
 </ul>
 #sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4
 
 
 Please review our Hiring Process Guidelines before your interview &mdash; click here to learn how interviewing at Agoda works.
 
 
 
 Discover More About Working At Agoda
 
 
 
 <ul>
 <li>
 Agoda Careers https://careersatagoda.com
 </li>
 <li>
 Facebook https://www.facebook.com/agodacareers/
 </li>
 <li>
 LinkedIn https://www.linkedin.com/company/agoda
 </li>
 <li>
 YouTube https://www.youtube.com/agodalife
 
 
 </li>
 </ul>
 
 Equal Opportunity Employer
 
 
 
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 
 
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 
 
 
 Disclaimer
 
 
 
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 
 
</div>

Security Engineer (Bangkok Based, Relocation Support)

Apple

Red Team Platform and Hardware secures the hardware/software boundary for all of Apple&rsquo;s products, focusing on operating systems, kernel, firmware, and user data protection. We&rsquo;re looking for a skilled, driven individual inspired to design and implement key systems, owning the architecture, implementation decisions, and validation methodology, as well as perform security reviews of existing designs. 
 
You&rsquo;ll become part of an outstanding team dedicated to securing low-level technologies such as the boot ROMs, firmware, and iOS and macOS kernel for our chipsets, such as Apple Silicon and wireless. You&rsquo;ll work with a wide variety of teams and vendors who are equally committed to great work, and your influence will be felt throughout Apple's extraordinary products, such as the iPhone, iPad, Mac and AirPods. 
 
We design and secure software for hundreds of millions of users. We make products that people LOVE. We are committed to user privacy and security. We have some of the most creative, passionate, hardworking engineers in the industry. We challenge each other to go beyond the norm to find new, innovative ways of solving problems and to make software safer, easier, and more fun to use. Not many jobs can offer all of these things. Security engineering jobs at Apple do, and much more. 
 
Description 
 
Our team focuses on security improvements for Apple&rsquo;s various platforms and the hardware that supports them, as well as building security tools to provide high assurance. We reverse engineer exploits, provide insightful analysis, implement innovative security features, consult with other teams on both hardware and software, audit code, and review designs. We are seeking someone with strong technical expertise and a passionate desire to secure low-level systems by showing how they can be broken. 
 
You&rsquo;ll be working alongside teammates with diverse technical backgrounds including mobile and console research, binary instrumentation, SoC microarchitecture, compiler development, applied fault injection, and more. If you have your own area of fascination and a love of low-level security, you&rsquo;ll find yourself right at home!&quot;,&quot;responsibilities&quot;:&quot;Provide hardware and firmware security design assistance 
 
Audit security critical firmware and hardware. 
 
Create tools that help automate security verification, testing, or research. 
 
Reverse engineer exploits, if necessary. 
 
This position may require occasional travel to other Apple sites, vendors, and security conferences. 
 
Preferred Qualifications 
 
Experience creating working proof of concepts from found vulnerabilities on systems with advanced countermeasures (ASLR, TZ, PAC, etc). 
 
Exposure to kernel or driver programming. 
 
Reverse engineering using tools such as IDA Pro. 
 
Familiarity with the principles and use of cryptographic primitives and protocols. 
 
Minimum Qualifications 
 
A proven track record in finding security vulnerabilities in shipping products and/or designing platform security countermeasures. 
 
Programming background in C, C++, and/or Objective-C. Additionally, must have proficiency in scripting language(s) such as Python. 
 
Proficiency with assembly languages, ARM a big plus. 
 
Familiarity with modern processor and SoC architecture. 
 
Background in secure programming patterns and code auditing. 
 
Have an understanding of past, current, and emerging security exploit classes. 
 
Proficiency with operating system internals, especially macOS, iOS, or other flavors of UNIX 
 
Have the ability to track and lead multiple parallel projects. 
 
Familiarity with collaborating with partner teams in hardware, software, and product groups to define and deliver rigorous security features 
 
Relevant experience or education, such as performing security research and analysis or a Bachelor's degree in Computer Science or related field. We are open to strong candidates with no formal education. 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $181,100 and $318,400, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Red Team Platform and Hardware Security Researcher

Innovative Computer Solutions Group, Inc

<div><div><div>Project Duration: Estimated 12-month engagement from kickoff through final delivery, validation, training, and closeout. 
 
Technology Stack: Frontend - Next.js, Backend - Python and Java 
 
Position Summary 
</div><div>We are seeking a Security Platform Lead to own the design and implementation of security-focused platform capabilities across identity, secrets protection, encryption-adjacent controls, access governance, secure storage, system hardening, and compliance readiness. This role is responsible for embedding security into platform architecture and delivery while supporting auditability, operational resilience, and secure engineering practices. 
</div>
<div> 
Key Responsibilities 
</div><ul><li>Lead security architecture and implementation across platform, application, and operational layers.</li></ul> 
<ul><li>Design and guide implementation of secure secrets management, certificate handling, privileged access controls, and service authentication patterns.</li></ul> 
<ul><li>Define security controls for identity, access, role governance, session security, audit logging, and administrative workflows.</li></ul> 
<ul><li>Guide secure storage, immutability, logging integrity, and cryptographic boundary design decisions.</li></ul> 
<ul><li>Define security baselines, hardening standards, and implementation guardrails for environments and services.</li></ul> 
<ul><li>Review architecture, code, configurations, and workflows for security risks and mitigations.</li></ul> 
<ul><li>Support incident readiness, disaster recovery planning, and operational validation from a security perspective.</li></ul> 
<ul><li>Produce and review security design documents, control narratives, configuration standards, and remediation plans.</li></ul> 
<div>
 
Required Qualifications 
</div><ul><li>Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field, or equivalent practical experience.</li></ul> 
<ul><li>7+ years of experience in security engineering, platform security, cloud security, or secure systems design.</li></ul> 
<ul><li>Direct experience designing or implementing systems that must align with FIPS 140-3 cryptographic module requirements or validated cryptographic modules where required.</li></ul> 
<ul><li>Strong familiarity with NIST SP 800-171 control implementation in nonfederal environments handling CUI.</li></ul> 
<ul><li>Ability to translate security requirements into technical controls for authentication, authorization, secrets handling, logging, system hardening, audit trails, and resilience.</li></ul> 
<ul><li>Experience with compliance-oriented security architecture, control mapping, and technical evidence preparation.</li></ul> 
<ul><li>Strong documentation and communication skills.</li></ul> 
<div>
 
Preferred Qualifications 
</div><ul><li>Experience with NIST SP 800-172 enhanced safeguards, especially cyber resiliency, defense-in-depth, and protection of higher-value systems.</li></ul> 
<ul><li>Experience with Kubernetes security, workload identity, certificate lifecycle, and secure service communication.</li></ul> 
<ul><li>Experience with secrets platforms, key protection workflows, privileged access control, or hardware-backed security solutions.</li></ul> 
<ul><li>Security certifications such as CISSP, CCSP, Security+, or equivalent.</li></ul> 
<div>
 
Success Profile 
</div><ul><li>Security-first mindset.</li></ul> 
<ul><li>Pragmatic and delivery-oriented.</li></ul> 
<ul><li>Strong architecture discipline.</li></ul> 
<ul><li>Able to work closely with developers and platform engineers.</li></ul>
</div>
This is a remote position.</div>

Security Platform Lead

Motion Recruitment

<div>
 
 
 Hybrid Cybersecurity Engineer III
 
 
 
 
 Duration: 6+ months
 
 
 
 
 Location: Silver Spring, MD
 
 
 
 
 
 
 
 SUMMARY
 
 
 <ul>
 <li>
 The Cloud Security Engineer is a hands-on technical security professional responsible for designing, implementing, and operating cloud security controls across our public cloud environments, with a primary focus on Google Cloud Platform (GCP).
 </li>
 </ul>
 
 
 JOB RESPONSIBILITIES / TYPICAL DAY IN THE ROLE
 
 
 <ul>
 <li>
 Serve as a hands-on Cloud Security Engineer focused on securing enterprise-scale GCP environments.
 </li>
 <li>
 Design, implement, and operate cloud vulnerability management processes across compute, container, serverless, and platform services.
 </li>
 <li>
 Leverage and manage CSPM/CNAPP platforms (e.g., Wiz, Orca, Prisma Cloud) to identify misconfigurations, prioritize risk, and drive remediation efforts with engineering teams.
 </li>
 <li>
 Develop automation and security tooling using Python (preferred) or similar scripting languages to improve detection, remediation, and reporting capabilities.
 </li>
 <li>
 Partner with engineering and DevOps teams to integrate security controls into CI/CD pipelines and infrastructure-as-code workflows.
 </li>
 <li>
 Review and harden GCP configurations, including IAM, networking, logging, storage, and container environments.
 </li>
 <li>
 Support security assessments of AI/ML workloads and cloud-native data platforms; contribute to proof-of-concept initiatives related to AI/ML security where applicable.
 </li>
 <li>
 Collaborate with cross-functional teams to remediate vulnerabilities identified through CSPM tools, scanners, and cloud-native security services.
 </li>
 <li>
 Contribute to the development and maintenance of cloud security standards, configuration baselines, and operational documentation.
 </li>
 <li>
 Support multi-cloud security initiatives, including AWS and Azure environments where required.
 </li>
 <li>
 Stay current with emerging cloud threats, vulnerability trends, and advancements in cloud security tooling
 </li>
 </ul>
 
 o GCP Cloud Security Engineering &amp; Hardening &ndash; 15%
 
 
 o Cloud Vulnerability Management (analysis, prioritization, remediation coordination) &ndash; 30%
 
 
 o CSPM/CNAPP Operations &amp; Risk Reduction &ndash; 10%
 
 
 o Security Automation &amp; Python Development &ndash; 15% o CI/CD &amp; DevSecOps Integration &ndash; 10%
 
 
 o Architecture Reviews &amp; Engineering Collaboration &ndash; 10%
 
 
 o AI/ML &amp; Emerging Technology Security Support &ndash; 5% o Documentation &amp; Continuous Learning &ndash; 5%
 
 
 
 
 
 
 MUST HAVE SKILLS / REQUIREMENTS
 
 
 <ul>
 <li>
 Strong knowledge and practical experience in Cloud Vulnerability Management
 </li>
 <li>
 7+ years of experience; Vulnerability identification, prioritization, risk assessment, and remediation coordination across cloud workloads and services.
 </li>
 <li>
 2) Demonstrated hands-on experience with AWS and GCP. a. 7+ years of experience; Cloud experience within a production environment.
 </li>
 <li>
 3) Hands-on experience with at least one CSPM/CNAPP platform a. 3+ years of experience; (e.g., Wiz, Orca, Prisma Cloud, Lacework, or equivalent)
 </li>
 </ul>
 
 
 NICE TO HAVE SKILLS / PREFERRED REQUIREMENTS
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Information Security, or related technical discipline, or equivalent practical experience.
 </li>
 <li>
 Cloud security certifications such as:
 </li>
 <li>
 GCP Professional Cloud Security Engineer
 </li>
 <li>
 AWS Security Specialty or Solutions Architect c
 </li>
 <li>
 Azure Security Engineer or Solutions Architect
 </li>
 <li>
 Experience with AI/ML platforms and securing machine learning workloads; prior proof-of-concept or project experience is a plus.
 </li>
 <li>
 Knowledge of AWS and/or Azure security services and architecture.
 </li>
 <li>
 Familiarity with Oracle Cloud Infrastructure (OCI).
 </li>
 <li>
 Experience integrating security tooling with platforms such as Slack, Jira, and CI/CD pipelines.
 </li>
 <li>
 Experience with SIEM and observability platforms (e.g., Splunk).
 </li>
 <li>
 Azure Experience is a plus.
 </li>
 <li>
 Experience with Brinqa.
 </li>
 <li>
 Excellent written and verbal communication skills with the ability to collaborate effectively with engineering and security stakeholders.
 </li>
 <li>
 Demonstrated hands-on experience securing Google Cloud Platform (GCP) environments in production.
 </li>
 <li>
 Strong knowledge and practical experience in Cloud Vulnerability Management, including vulnerability identification, prioritization, risk assessment, and remediation coordination across cloud workloads and services.
 </li>
 <li>
 Hands-on experience with at least one CSPM/CNAPP platform (e.g., Wiz, Orca, Prisma Cloud, Lacework, or equivalent).
 </li>
 <li>
 Proficiency in Python (preferred) or similar programming/scripting languages, with experience developing automation or security tooling.
 </li>
 <li>
 Strong understanding of cloud IAM concepts, least-privilege access, and identity governance in GCP.
 </li>
 <li>
 Solid understanding of cloud networking fundamentals, including VPC design, routing, segmentation, and secure connectivity patterns.
 </li>
 <li>
 Experience securing containerized workloads and Kubernetes environments.
 </li>
 <li>
 Familiarity with Infrastructure-as-Code (Terraform preferred) and secure configuration management practices.
 </li>
 <li>
 Strong understanding of security principles, risk management, and compliance considerations in public cloud environments.
 </li>
 </ul>
</div>

Cyber Security Engineer

ISPA Technology

<div><div>Position Title: Platform DevSecOps Engineer 
Location: Panama City Beach, FL 
Clearance: Top Secret (preferred) or Secret (required)</div>
<div></div><div>Position Overview:</div>
 <div>ISPA Technology is seeking two Platform DevSecOps Engineers to support a platform-focused engineering lane responsible for build automation and patch distribution in shore environments. These roles are ideal for engineers who understand how to connect software delivery, system sustainment, and cybersecurity into one disciplined operating model. You will help create the automation, control points, and technical rigor needed to deliver patches and platform changes with confidence&mdash;without sacrificing speed or supportability.</div>
<div>What You Will Do</div>
<ul><li>Develop and maintain DevSecOps workflows that support platform build, integration, patch validation, release management, and deployment.</li>
<li>Engineer repeatable automation for software and patch distribution across platform environments.</li>
<li>Embed security, testing, and quality controls into release workflows so that compliance and delivery move together.</li>
<li>Collaborate with platform, cyber, and systems stakeholders to improve release traceability, rollback readiness, and operational stability.</li>
<li>Create reusable scripts, templates, and procedures that reduce manual work and improve engineering consistency.</li>
<li>Support documentation for release engineering, automation design, and sustainment operations.</li>
</ul><div>Technical Environment</div>
<ul><li>DevSecOps pipeline design</li>
<li>Patch engineering and distribution workflows</li>
<li>Build automation and release orchestration</li>
<li>Security controls in CI/CD</li>
<li>Artifact and version management</li>
<li>Infrastructure or platform automation scripting</li>
</ul><div>Required Qualifications</div>
<ul><li>Experience in DevSecOps, release engineering, platform automation, or related software delivery roles.</li>
<li>Strong understanding of patching, build promotion, software packaging, and deployment control practices.</li>
<li>Experience integrating security and testing into delivery workflows.</li>
<li>Ability to troubleshoot across pipeline logic, build artifacts, and deployment outcomes.</li>
<li>Strong written communication and process documentation ability.</li>
</ul><div>Preferred Qualifications</div>
<ul><li>Experience with platform patch distribution in regulated environments.</li>
<li>Exposure to configuration management, infrastructure automation, or cybersecurity tooling.</li>
<li>Experience improving delivery metrics, change control, or deployment reliability.</li>
</ul><div>Why ISPA Technology</div>
<ul><li>Work on meaningful defense and mission-support engineering problems with experienced technical teams.</li>
<li>Contribute across automation, cyber, platforms, networking, integration, and test&mdash;not just one narrow lane.</li>
<li>Join a culture that values ownership, technical depth, curiosity, and practical execution.</li>
<li>Live and work in Panama City Beach, Florida, with direct access to a growing technical mission hub.</li>
</ul><div>We are looking for engineers who combine technical depth with practical execution&mdash;people who can turn complexity into clarity, and design into dependable results.</div></div>

Platform DevSecOps Engineer

Search 10000+ Platform security engineer jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 platform security engineer jobs Near Me

Security Engineer (Bangkok Based, Relocation Support)

Red Team Platform and Hardware Security Researcher

Security Engineer (Bangkok Based, Relocation Support)

Security Engineer (Bangkok Based, Relocation Support)

Security Platform Lead

Cyber Security Engineer

Platform DevSecOps Engineer