Senior Platform Security Engineer - AI Resilience & Security Enhancements (Contract)

Jobgether; Schweiz; Hybrid; CHF 165,000 - 276,000; Full time

Benefits offered by this job

Contract engagement for security & AI

Hands-on security tooling ownership

Cross-functional collaboration with SE

Remote work after initial in-person

Exposure to AI security, cloud-native,

Job summary

Jobgether in Switzerland is partnering to fill a Senior Platform Security Engineer contract focused on AI resilience and security enhancements. You will strengthen security controls for AI-enabled workflows, deliver production-ready tooling, and collaborate with platform, engineering, and security teams to improve security without impacting availability.

The role demands hands-on implementation across CI/CD security, software supply chain, and access controls, with a strong emphasis on

Qualifications

• Hands-on experience in Platform Engineering, DevOps, SRE, DevSecOps, or Platform Security.
• Experience designing and implementing security controls, not only reviews or reports.
• Strong CI/CD understanding and secure developer workflows integration.
• Knowledge of software supply chain security including dependency management and vulnerability handling.
• Understanding of IAM, RBAC, and least-privilege principles.
• Practical container security experience and working knowledge of Kubernetes.
• Ability to write automation or security tooling; Go or Python preferred.

Responsibilities

• Design, evaluate, and implement controls for secure autonomous AI agent execution, including policy enforcement and auditability.
• Integrate security checks into CI/CD pipelines and PR workflows to catch unsafe code before merge.
• Evaluate security tools and AI-assisted code security approaches for accuracy and usability.
• Strengthen production access controls through least-privilege permissions and comprehensive audit trails.
• Adapt tools and workflows to support secure, controlled access to production environments.
• Improve CI/CD and software supply chain security through secure builds, SBOMs, and policy enforcement.
• Develop practical security automation and platform guardrails for engineering teams.
• Collaborate with software engineers on design, prototyping, and integration of security improvements.
• Contribute to broader security initiatives with specialist teams as needed.
• Produce clear technical documentation and handover materials for long-term ownership.
• Deliver changes with low-risk implementation while preserving availability and stability.

Skills

Platform Engineering

DevOps

SRE

DevSecOps

Platform Security

Tools

Go

Python

Kubernetes

Terraform

AWS

GCP

IAM

RBAC

Job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior Platform Security Engineer - AI Resilience & Security Enhancements (Contract) based in Switzerland.

In this hands-on contract role, you will strengthen the security and resilience of a modern engineering platform, with a particular focus on AI-enabled workflows and secure software delivery. You will work closely with platform, engineering, and security teams to design, prototype, and implement practical security controls. Your work will span secure autonomous agent execution, CI/CD security, production access management, container security, and software supply chain integrity. You will turn security requirements into reliable, maintainable tooling and workflows that developers can use in their day-to-day work. The role combines technical problem-solving, automation, and close collaboration with engineers to deliver measurable improvements to production systems. You will help improve security without compromising service availability or engineering productivity.

Accountabilities

• Design, evaluate, and implement controls for secure autonomous AI agent execution, including policy enforcement, permissions, sandboxing, execution isolation, and auditability.
• Integrate security checks into CI/CD pipelines and pull request workflows to identify vulnerable or unsafe code changes before they are merged.
• Evaluate conventional security tools and AI-assisted code security approaches, assessing detection accuracy, false positives, potential bypasses, and developer usability.
• Strengthen production access controls through least-privilege permissions, secure privileged-access pathways, session controls, and comprehensive audit trails.
• Adapt engineering tools and workflows to support secure, controlled access to production environments.
• Improve CI/CD and software supply chain security through secure builds, dependency and container scanning, provenance, artifact signing, software bills of materials (SBOMs), and policy enforcement.
• Develop practical security automation and platform guardrails that engineering teams can adopt, operate, and maintain.
• Collaborate directly with software engineers on technical design, prototyping, implementation, and the integration of security improvements into production systems.
• Contribute to broader security engineering initiatives, partnering with specialist teams when deeper domain expertise is required.
• Produce clear technical documentation, implementation guidance, and handover materials to support long-term ownership.
• Deliver changes through structured, low-risk implementation practices while preserving service availability and operational stability.

Requirements

• Strong hands-on experience in Platform Engineering, DevOps, Site Reliability Engineering (SRE), DevSecOps, or Platform Security, supported by solid security fundamentals.
• Demonstrated experience designing and implementing security controls directly, rather than focusing solely on reviews, assessments, or reporting findings.
• Strong understanding of CI/CD pipelines, modern software delivery practices, and integrating security into developer workflows.
• Good knowledge of software supply chain security, including dependency management, secure builds, provenance, artifact signing, and vulnerability management.
• Understanding of identity and access management (IAM), role-based access control (RBAC), and least-privilege principles.
• Practical experience with container security and working knowledge of Kubernetes.
• Ability to write automation, scripts, or security tooling in a programming language; Go or Python experience is useful, with a willingness to work in Go where required.
• Experience collaborating with engineers to deliver practical security enhancements in production environments.
• Strong communication, technical documentation, and problem-solving skills, with the ability to explain security decisions and work effectively across teams.

Desirable experience includes:

• Terraform or other Infrastructure as Code (IaC) tools.
• Public cloud platforms such as AWS or Google Cloud Platform (GCP).
• Security automation, policy-as-code, or automated policy enforcement.
• Container and runtime isolation, sandboxing, or related execution security controls.
• Securing AI agents or other AI-enabled engineering tools, including using large language models (LLMs) for security analysis or automation.
• Threat modelling and security design practices.
• Mutual TLS (mTLS), public key infrastructure (PKI), cryptography, or key management.
• Working in regulated industries, financial services, or other business-critical environments.

Relevant technical environment: Go, Python, CI/CD, Kubernetes, Terraform, AWS, GCP, IAM, RBAC, software supply chain security, security policy automation, and AI security controls.

Benefits

• Contract-based engagement focused on a high-impact security and resilience programme.
• Hands-on ownership of security controls across AI-enabled engineering workflows, cloud infrastructure, and software delivery.
• Close collaboration with experienced engineering, platform, and security specialists.
• Opportunity to shape practical security tooling, automation, and secure engineering practices in a business-critical environment.
• Remote working arrangement following an initial in-person office visit to collect the equipment required for the role.
• Opportunity to work on modern technologies spanning AI security, cloud-native platforms, CI/CD, and software supply chain protection.