Platform Security Engineer
About The Position
ITHAKA is seeking a Platform Security Engineer to mature its DevOps capabilities into DevSecOps by embedding security into software delivery, infrastructure, and developer workflows. The role builds practical engineering capabilities that help teams identify, prioritize, and remediate security risks more quickly and consistently through automation, integrated security tooling, and secure-by-default practices. The Platform Security Engineer partners with engineers, architects, and platform stakeholders across ITHAKA to reduce security risk through automation, standardization, and developer enablement. The position reports to the Associate Director, Product Engineering, is part of the Technology Enabling Services team, and works closely with the Chief Architect through a dotted-line relationship for technical direction, architectural guidance, and alignment on enterprise security strategy.
Requirements
- 3–5 years of experience in security engineering, platform engineering, DevSecOps, or a closely related technical role.
- Hands-on experience implementing security tooling and controls in modern software delivery environments.
- Experience with vulnerability management, dependency management, package governance, or software supply chain security.
- Familiarity with CI/CD, source control workflows, infrastructure automation, and cloud-based application environments.
- Ability to write scripts or automation to improve security processes and reduce manual effort.
- Strong judgment about balancing risk reduction, developer experience, and delivery needs.
- Clear communication skills and ability to work effectively with engineers, architects, and other business stakeholders.
- Ability to work independently and collaboratively as part of a cross-functional team, manage substantive technical work, and guide peers in an area of specialty.
- Must be able to work and reside in the continental United States.
- ITHAKA is not considering candidates who require immigration sponsorship to work in the United States.
Nice To Haves
- Experience with AWS infrastructure and services, and common engineering tooling used in modern product organizations.
- Experience using AI-enabled tooling in this area.
Responsibilities
- Build and improve engineering workflows and tooling for vulnerability management across applications, dependencies, containers, and infrastructure.
- Advocate for integrating security checks and policy controls into software delivery pipelines and day-to-day developer workflows.
- Improve dependency management and package governance so teams can address software exposure consistently and sustainably.
- Help evaluate, implement, and tune security tooling, including SAST, DAST, SCA, secret scanning, and related platform controls.
- Build automation that reduces repetitive manual remediation work and speeds up secure delivery.
- Partner with engineering teams to design and promote secure-by-default patterns, templates, and guardrails.
- Work with engineers and technical leaders to triage findings, prioritize risks, and translate them into practical remediation plans.
- Contribute to secure software development lifecycle practices, documentation, and internal guidance aligned with how ITHAKA teams build and operate systems.
- Measure the effectiveness and adoption of security controls and recommend practical improvements over time.
Benefits
- Medical, dental, and vision plans.
- Employer-paid 10% retirement contribution.
- Paid parental and caregiver leave.
- 22 days of paid time off.
- 11 paid holidays.
- Up to 12 paid sick days.
- Wellness benefits.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
