Platform Security Engineer

Akka•San Francisco, CA

20d•Remote

About The Position

We are seeking a hands-on Platform Security Engineer to join our team. You will help architect, implement, and maintain security solutions that safeguard our systems, applications, and data. You’ll partner closely with development, operations, and product teams to build secure services from the ground up, detect and respond to threats, and continuously improve our security posture.

Requirements

Solid understanding of cloud security principles and practices
Familiarity with modern security tools and methodologies
Strong analytical and problem-solving skills
The team is distributed, which means that a very high degree of both autonomy and teamwork skills are required
Excellent verbal and written communication skills (English)

Nice To Haves

CISSP, OSCP, AWS Security Specialty, or GCP Cloud Security preferred
AWS/Azure/GCP security services; Kubernetes hardening

Responsibilities

Harden Akka’s PaaS for the bring your own cloud deployment model
Review existing security infrastructure, identify critical systems and data flows, and understand current compliance requirements.
Conduct AI threat modeling and improve our adversarial robustness
Maintain CNAPP solution to manage and secure cloud infrastructure, Kubernetes deployments, and applications. Establish policies and alerting mechanisms within the CNAPP.
Develop plans to integrate telemetry data and configure processing for use in security analysis.
Utilize next-gen SIEM platform. Optimize the existing SIEM, ensuring data integrity and compliance.
Integrate security practices into the software development lifecycle. Implement measures to secure the software supply chain and develop secure development policies.
Create and implement security policies as code to automate and enforce security controls.
Identify and implement automation opportunities for collecting evidence required for compliance.
Analyze findings and implement improvements to the organization's security posture, remediating vulnerabilities and deploying additional security controls.
Create comprehensive documentation for all configurations, processes, and procedures. Provide training and knowledge sharing with other team members.