Staff Platform Security Engineer - Build Secure DevOps

On; Zürich; Vor Ort; CHF 180.000 - 270.000; Vollzeit

Zusammenfassung

On is seeking a Staff Security Engineer - Platform in Zürich to turn security requirements into implemented controls across platform, CI/CD, and cloud environments. You will embed security into design, build secure pipelines, and reduce risk with practical engineering solutions.

You will contribute directly to code, infrastructure, and security automation, partnering with Engineering, AI, Platform & Ops, and Cloud Security teams.

Qualifikationen

• 12+ years of experience in security engineering, platform security, cloud security, DevSecOps, application security, or infrastructure security
• Hands-on experience contributing to engineering workflows using Git, pull requests, code reviews, CI/CD pipelines, automation, or infrastructure-as-code
• Experience with cloud environments, ideally including Google Cloud Platform; understand cloud IAM, network exposure, platform security, and secure configuration patterns
• Practical experience with vulnerability remediation and moving from finding to fix, including validating closure and preventing recurrence
• Familiarity with CI/CD security controls such as secrets scanning, dependency scanning, SAST, infrastructure-as-code scanning, policy-as-code, or secure build pipelines
• Knowledge of identity and access security concepts, including least privilege, privileged access, service accounts, non-human identities, temporary access, and credential rotation
• Ability to translate threat models, risk scenarios, and architecture requirements into concrete technical controls
• Curiosity about emerging AI security risks and securing modern development workflows involving AI-generated code, coding agents, MCP servers, and automation
• Strong collaboration skills to build trust with Engineering, AI, Platform & Ops, Cloud Security Architecture, Cyber Defence, and GRC teams
• Clear communication with technical and non-technical stakeholders, focusing on practical risk reduction
• Pragmatic mindset balancing speed, security, engineering quality, and business impact

Aufgaben

• Work side-by-side with Engineering, AI, Platform & Ops, and Cloud Security Architecture teams to translate security requirements, threat models, and vulnerability findings into practical engineering outcomes
• Contribute hands-on to platform, CI/CD, infrastructure-as-code, and security-control repositories through pull requests, configuration changes, automation, and policy-as-code
• Build and improve scalable security guardrails across the software delivery lifecycle, including secrets scanning, dependency scanning, infrastructure-as-code checks, secure build controls, and AI development workflows
• Partner with engineering teams to remediate vulnerabilities, reduce attack surface, and prevent recurring findings through direct fixes, paired engineering work, or automated controls
• Strengthen identity and access security for both human and non-human identities, including service accounts, CI runners, automation workflows, coding agents, MCP servers, and bots
• Support secure-by-design reviews and threat modelling for cloud, platform, identity, CI/CD, and AI-enabled development, ensuring risks are addressed before implementation starts
• Participate in operational ownership for security-relevant infrastructure and controls you materially contribute to, including root-cause analysis and incident remediation where needed

Kenntnisse

Security engineering

DevSecOps

Threat modelling

Vulnerability remediation

Cloud security

CI/CD security

Tools

Git

CI/CD pipelines

Infrastructure as Code

Security automation

Jobbeschreibung

On is seeking a Staff Security Engineer - Platform in Zürich to turn security requirements into implemented controls across platform, CI/CD, and cloud environments. You will embed security into design, build secure pipelines, and reduce risk with practical engineering solutions.

You will contribute directly to code, infrastructure, and security automation, partnering with Engineering, AI, Platform & Ops, and Cloud Security teams.