- London, London, United Kingdom
- Hybrid
- Full-time · Senior
The Platform Security team ensures developers have the tools and documentation to ship secure code and create services using a secure-by-design ethos.
Responsibilities
- Develop cloud-native controls in Azure, AWS and/or GCP to enforce the security baseline at scale, integrating with open-source and vendor tools as needed.
- Enhance product security along the software development lifecycle by creating “paved roads” and defining additional security and software excellence requirements for containerised services running on multiple managed Kubernetes clusters.
- Act as a subject matter expert for the Platform and Engineering teams by providing guidance on cloud and k8s services, secure infrastructure-as-code, modern secure AuthZ/AuthN techniques (i.e. SPIFFE) and secrets management solutions.
- Collaborate with other teams to define and implement Cloud/K8s native policies and procedures (i.e. Kyverno, Pod Security Standards).
- Conduct security assessments, audits and architecture reviews in order to introduce new cloud controls in the platform and make recommendations to improve the overall security posture.