Platform Security Engineer

Luxor Technology Corporation

1d • Remote

About The Position

Luxor is expanding its platform engineering team as its global client base grows. The Senior Platform Security Engineer will join Luxor AI's Platform team and own security and compliance within the team's scope, contributing to the development and operation of production infrastructure. The role is suited to someone with experience operating security and compliance functions in a large organization who wants the autonomy to evolve those functions at a fast-growing startup, and who values protecting important data and providing reliable services to clients.

This is a fully remote role based in the United States, with travel seldomly if needed. The position reports directly to the Chief Technology Officer.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.
• 8+ years of experience in DevOps, software engineering, or security engineering.
• Proficiency with CI/CD platforms such as GitHub Actions, infrastructure-as-code tools such as Terraform, and configuration management tools such as Ansible.
• Proficiency in at least two of the following languages: Go, JavaScript, Rust, and Python.
• Hands-on cloud security experience in GCP, Alibaba, AWS, OVH, Hetzner, and/or Azure, including identity and access management, containerization, network security controls, encryption, logging, and monitoring.
• Experience hardening access and controls, such as IAM Policy.
• Hands-on experience with Kubernetes GitOps, such as Flux or ArgoCD.
• Demonstrated experience implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement.
• Familiarity with penetration testing applications or experience conducting penetration testing engagements.
• Strong scripting skills in Python or Bash for automation and integration.
• Experience supporting third-party attestations and audits, such as SOC 2 Type 2 and ISO 27001, including preparation, implementation, and ongoing evidence collection.
• Experience operating and maintaining Zero Trust network infrastructures using Tailscale and Cloudflare WARP, providing direct technical support to users while managing access policies and troubleshooting remote connectivity issues.
• Strong communication and governance skills, including the ability to translate technical risk into business terms for technical and non-technical audiences and advocate for security without slowing down delivery.

Responsibilities

• Serve as a day-to-day security advisor and advocate for security requirements in sprint planning, architecture reviews, process discussions, product direction, design decisions, and work in progress.
• Build and maintain centralized automated security testing and enforcement in CI/CD, including SAST/DAST, SCA, secrets scanning, and IaC scanning.
• Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate ongoing patching and hardening into engineering operations.
• Audit application environments and development processes to ensure compliance with internal and external requirements and alignment with security standard methodologies.
• Implement and maintain cloud detection and response monitoring, and act as an incident CIRT responder.
• Document controls, configurations, and decisions to build durable institutional knowledge.
• Enforce policies and detection using device management tooling such as FleetMDM.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior