Senior Platform Security Engineer

Summary

Join Docplanner's Internal Platform Security team as a Platform Security Engineer and play a pivotal role in safeguarding the company's infrastructure. You will be responsible for maintaining the security and integrity of the platform, collaborating with various teams, and ensuring compliance with industry standards. The role involves developing and maintaining security tools, managing vulnerabilities, and optimizing system scalability and cost efficiency. You will work closely with Global Security, PMS teams, the Internal Platform Core Team, Experience Teams, and Legal to ensure platform security and compliance. This position offers a remote or hybrid work model, flexible hours, and a comprehensive benefits package.

Requirements

• At least 5 years of experience related with security
• Vast experience with container orchestration platforms like Kubernetes and how to secure them (must-have)
• You know how to maintain, develop policy for security-focused CNI/Service Mesh (eg. Calico, Cilium)
• You know how to scan for and manage vulnerabilities at scale
• You have experience with Hashicorp Vault
• You know why and how to use Terraform and popular CI/CD tools
• You know about building scalable and secure production HA environments using AWS
• You know your ways around network security services eg. AWS WAF/Cloudflare
• You are not afraid of developing tools or scripts in Bash or GO to automate work
• You can communicate in English (both spoken and written - min. B2 level)
• You know how to bring people on your side when talking about security and best practices

Responsibilities

• Develop and maintain tools for Global Security in order to deliver vulnerability management platforms for application triaging and continuous compliance
• Making sure that our platform is compliant with the best industry practices and standards for security (ISO27001, C5, SOC2)
• Help us to introduce security on every step of our platform lifecycle
• Ability to vigilantly understand and mitigate security threats before they arise
• Optimize system scalability and cost efficiency
• Development, monitoring, and maintenance of Kubernetes clusters on several continents
• CI / CD development and maintenance
• Make sure that all of our services are deployed in a way that makes them highly available
• Fixing urgent issues and optimizing performance
• Support other team members in their daily work

Benefits

• A salary adequate to your experience and skills
• Flexible remuneration and benefits system via Flexoh , which includes: restaurant card, transportation card, kindergarten, and training tax savings
• Share options plan after 6 months of working with us
• Remote or hybrid work model with our hub in Barcelona
• Flexible working hours (fully flexible, as in most cases you only have to be on a couple of meetings weekly)
• Summer intensive schedule during July and August (work 7 hours, finish earlier)
• 23 paid holidays, with exchangeable local bank holidays
• Additional paid holiday on your birthday or work anniversary (you choose what you want to celebrate)
• Private healthcare plan with Adeslas for you and subsidized for your family (medical and dental)
• Access to hundreds of gyms for a symbolic fee in partnership for you and your family with Wellhub
• Access to iFeel , a technological platform for mental wellness offering online psychological support and counseling