Senior Platform Security Engineer (100% Remote within Poland)

Docplanner

2d•Remote

About The Position

The Internal Platform team is responsible for building a reliable, scalable, and self-service ecosystem that accelerates product development. This platform supports the entire software lifecycle and is tailored to the organization’s technological needs and strategic direction. The Platform Security team, a part of the Internal Platform, is the first point of contact for the Global Security Team. This team is responsible for the security and integrity of the underlying infrastructure, safeguarding the platform from vulnerabilities, threats, and attacks. Key responsibilities include developing and maintaining tools for Global Security, managing vulnerability platforms for application triaging, and ensuring continuous compliance. The role involves addressing challenges related to the complexity of the Docplanner organization, integrating diverse technology stacks, and ensuring the scalability and reliability of systems as the company grows.

Requirements

At least 5 years of experience related to security.
Vast experience with container orchestration platforms like Kubernetes and how to secure them (must-have).
Experience in maintaining and developing policies for security-focused CNI/Service Mesh (e.g., Calico, Cilium).
Experience in scanning for and managing vulnerabilities at scale.
Experience with Hashicorp Vault.
Experience with building scalable and secure production HA environments using AWS.
Knowledge of network security services (e.g., AWS WAF/Cloudflare).
Ability to develop tools or scripts in Bash or GO to automate work.
Communication in English (both spoken and written - min. B2 level).
Ability to gain buy-in from others regarding security and best practices.

Nice To Haves

Experience with Terraform and popular CI/CD tools.
Understanding of why and how to use Terraform and popular CI/CD tools.

Responsibilities

Developing and maintaining tools for Global Security to deliver vulnerability management platforms for application triaging and continuous compliance.
Understanding and integrating the diverse technology stacks used by different teams within Docplanner.
Ensuring that systems are designed to handle high traffic, are scalable, and secure.
Collaborating with Global Security on platform compliance, risk management, and acting as a technical point of contact during escalated incidents.
Auditing existing systems with PMS teams, supporting secure migration to the central platform, and interpreting global security and legal requirements.
Consulting with the Core Team within Internal Platform on technical compliance, networking standards, and resolving misconfigurations or vulnerabilities.
Providing guidance to Experience Teams on infrastructure-related application security topics, secure encryption practices, and collaborating on secure CSP integrations.
Ensuring alignment with Legal on data protection regulations, encryption standards, and locality requirements.
Making sure that the platform is compliant with industry best practices and standards for security (ISO27001, C5, SOC2).
Introducing security at every step of the platform lifecycle.
Vigilantly understanding and mitigating security threats before they arise.
Optimizing system scalability and cost efficiency.
Development, monitoring, and maintenance of Kubernetes clusters on several continents.
CI/CD development and maintenance.
Ensuring all services are deployed in a highly available manner.
Fixing urgent issues and optimizing performance.
Supporting other team members in their daily work.

Benefits

Salary adequate to experience and skills.
True flexibility and work-life balance.
Remote or hybrid work model with a hub in Warsaw.
Flexible working hours (fully flexible, with only a couple of meetings weekly required in most cases).
20/26 days of paid time off (depending on contract).
Additional paid day off on birthday or work anniversary.
Private healthcare plan with Signal Iduna for you and subsidized for your family.
Multisport card co-financing.
Access to iFeel, a technological platform for mental wellness offering online psychological support and counseling.
Free English and Spanish classes.