FT
Senior Security Engineer, Platform Engineering
full-time•Australia, Singapore
Summary
About this role
<p><strong><span data-contrast="none"><span data-ccp-parastyle="No Spacing">ROLE SUMMARY</span></span></strong><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></p>
<p><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Firmus Technologies is seeking a Senior Security Engineer, Platform Engineering to join our AI Platforms team. You will drive the design and implementation of our platform security. You will also champion and partner with other teams to standardize security management and build internal security culture across the organization. This role is ideal for a self-starter with passion for building things from first principles. You naturally break down complex problems into their fundamental truths to uncover novel and elegant solutions—rather than relying on conventional patterns.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></p>
<p><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="No Spacing">KEY</span><span data-ccp-parastyle="No Spacing"> RESPONSIBILITIES</span></span></strong><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></p>
<ul>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Lead platform security efforts by assessing risks, hardening </span><span data-ccp-parastyle="No Spacing">platforms</span><span data-ccp-parastyle="No Spacing">, and ensuring secure access for cloud and on-premises systems.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Own </span><span data-ccp-parastyle="No Spacing">the security standard for Firmus Managed Kubernetes Service </span><span data-ccp-parastyle="No Spacing">for high-performance computing </span><span data-ccp-parastyle="No Spacing">product offering to customers</span><span data-ccp-parastyle="No Spacing"> with NVIDIA H200 and GB300</span><span data-ccp-parastyle="No Spacing">.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Apply Kubernetes security best practices, including RBAC, admission controllers, pod security, auditing, and network policies.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Implement supply chain security for Kubernetes, including image signing</span><span data-ccp-parastyle="No Spacing">,</span><span data-ccp-parastyle="No Spacing"> vulnerability scanning, and policy enforcement.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Secure infrastructure as code (</span><span data-ccp-parastyle="No Spacing">IaC</span><span data-ccp-parastyle="No Spacing">) pipelines with automated security scanning.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Automate patch management for platform components, ensuring </span><span data-ccp-parastyle="No Spacing">timely</span><span data-ccp-parastyle="No Spacing"> updates and robust testing before deployment.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Experiment with AI/ML-powered</span> <span data-ccp-parastyle="No Spacing">tools</span><span data-ccp-parastyle="No Spacing"> to </span><span data-ccp-parastyle="No Spacing">eliminate</span> <span data-ccp-parastyle="No Spacing">mundane </span><span data-ccp-parastyle="No Spacing">tasks, know security posture quickly and </span><span data-ccp-parastyle="No Spacing">take </span><span data-ccp-parastyle="No Spacing">proactive action on drift or anomalies.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Collaborate with other teams to align and </span><span data-ccp-parastyle="No Spacing">enhance </span><span data-ccp-parastyle="No Spacing">security </span><span data-ccp-parastyle="No Spacing">posture on</span><span data-ccp-parastyle="No Spacing">:</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span>
<ul>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Automated compliance checks and reporting</span><span data-ccp-parastyle="No Spacing">.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Secrets management for secure credential storage and auditing</span><span data-ccp-parastyle="No Spacing">.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Identity </span><span data-ccp-parastyle="No Spacing">and privileged </span><span data-ccp-parastyle="No Spacing">access management for applications</span> <span data-ccp-parastyle="No Spacing">and remote access</span><span data-ccp-parastyle="No Spacing">.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">E</span><span data-ccp-parastyle="No Spacing">ncryption solutions, including SSL/TLS certificate management, to protect data in transit and at rest</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Security</span><span data-ccp-parastyle="No Spacing"> monitoring and incident response.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">S</span><span data-ccp-parastyle="No Spacing">ecurity awareness and guidance to engineering </span><span data-ccp-parastyle="No Spacing">and operations </span><span data-ccp-parastyle="No Spacing">teams</span><span data-ccp-parastyle="No Spacing">.</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
</ul>
</li>
</ul>
<p><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="No Spacing">SKILLS AND EXPERIENCE</span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></strong></p>
<ul>
<li><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Bachelor's degree in computer science or a related technical field. </span></span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>
<li><span data-contrast="none">7+ years of experience as Platform Security, DevSecOps or Site Reliability Engineer. </span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">Demonstrated strong proficiency on the following areas:</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span>
<ul>
<li><span data-contrast="none">Security standards and frameworks, including CIS Benchmarks, NIST, ISO 27001, and SOC 2.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">OWASP Top 10 security risks for applications and cloud-native infrastructure.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">Kubernetes security and networking best practices with tools like Calico, kube-bench, or Falco.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">Kubernetes supply chain security best practices with tools like Cosign, Trivy or Kyverno.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">Automated IaC security scanning with tools like Checkov or Snyk.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">Secrets management such as HashiCorp Vault or Azure Key Vault.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">Identity Access Management and Privileged Access Management such as Auth0, Microsoft Entra, HashiCorp Boundary or Teleport.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">SSL/TLS certificate management, including automated issuance, renewal, deployment, and monitoring.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
</ul>
</li>
<li><span data-contrast="none">Competent in scripting and programming skills (e.g., Bash, Python, Go).</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">Systems knowledge on Linux internals, networking stacks, and distributed storage. </span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">Clear and effective English communication, written and spoken. </span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">Security certifications (e.g., CISSP, CKS, OSCP, GCP/AWS/Azure Security).</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">Bonus: </span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span>
<ul>
<li><span data-contrast="none">Experience in high-growth startups or regulated industries with robust security and data privacy requirements, including SOC 2 Type 2, ISO 27001, PCI DSS or HIPAA.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
<li><span data-contrast="none">Experience applying security principles to AI/ML Ops environments.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li>
</ul>
</li>
</ul>
What you'll do
- Lead platform security efforts by assessing risks and hardening platforms. Collaborate with other teams to enhance security posture and implement security best practices.
Ready to join Firmus Technologies?
Take the next step in your career journey
Frequently Asked Questions
What does a Senior Security Engineer, Platform Engineering do at Firmus Technologies?
As a Senior Security Engineer, Platform Engineering at Firmus Technologies, you will: lead platform security efforts by assessing risks and hardening platforms. Collaborate with other teams to enhance security posture and implement security best practices..
Is the Senior Security Engineer, Platform Engineering position at Firmus Technologies remote?
The Senior Security Engineer, Platform Engineering position at Firmus Technologies is based in Australia, Australia and Singapore, Singapore. Contact the company through Clera for specific work arrangement details.
How do I apply for the Senior Security Engineer, Platform Engineering position at Firmus Technologies?
You can apply for the Senior Security Engineer, Platform Engineering position at Firmus Technologiesdirectly through Clera. Click the "Apply Now" button above to start your application. Clera's AI-powered platform will help match your profile with this opportunity and guide you through the application process.