Platform Security Lead: Secure-by-Design & Safe Pipelines

On; Zürich; Vor Ort; CHF 140.000 - 180.000; Vollzeit

Zusammenfassung

On is seeking a hands-on Lead Platform Security Engineer to work closely with Engineering, Platform & Ops, and Cloud Security Architecture to embed security into platform design, deployment and operation. You will contribute directly to code, pipelines, and security automation, reducing risk and enabling secure engineering practices across the development lifecycle.

You will translate threat models into concrete controls, collaborate with multiple teams, and advance secure-by-design reviews for

Qualifikationen

• 10+ years in security engineering, platform security, cloud security, DevSecOps, or related fields.
• Hands-on contributor to engineering workflows using Git, PRs, CI/CD, automation or IaC.
• Experience with cloud environments (preferably Google Cloud Platform) and cloud IAM, network exposure, and secure configurations.
• Practical experience remediating vulnerabilities and closing findings to prevent recurrence.
• Knowledge of CI/CD security controls: secrets scanning, dependency scanning, SAST, IaC scanning, policy-as-code, and secure build pipelines.
• Familiarity with identity and access security concepts: least privilege, privileged access, service accounts, non-human identities, temporary access, credential rotation.

Aufgaben

• Translate security requirements, threat models, and findings into concrete engineering outcomes with cross-functional teams.
• Contribute hands-on to platform, CI/CD, IaC, and security-control repositories via PRs, configuration changes, automation, and policy-as-code.
• Build and improve scalable security guardrails across the software delivery lifecycle (secrets scanning, dependency scanning, IaC checks, secure build controls, AI development workflows).
• Remediate vulnerabilities with engineering teams to reduce attack surface and prevent recurring findings.
• Strengthen identity and access security for human and non-human identities (service accounts, CI runners, automation workflows).
• Support secure-by-design reviews and threat modeling for cloud, platform, identity, CI/CD, and AI-enabled development.

Kenntnisse

Security engineering

Cloud security

DevSecOps

CI/CD pipelines

Infrastructure as code

Vulnerability remediation

Threat modeling

Security automation

Tools

Git

CI/CD tooling

Terraform

Cloud IAM

Jobbeschreibung

On is seeking a hands-on Lead Platform Security Engineer to work closely with Engineering, Platform & Ops, and Cloud Security Architecture to embed security into platform design, deployment and operation. You will contribute directly to code, pipelines, and security automation, reducing risk and enabling secure engineering practices across the development lifecycle.

You will translate threat models into concrete controls, collaborate with multiple teams, and advance secure-by-design reviews for