Platform Security Engineer - Cloud, Kubernetes & IaC

United States Digital Space LLC; Paris; Sur place; EUR 84 000 - 106 000; Plein temps

Avantages offerts par ce poste

Competitive salary & equity

5-week vacation

Paid sick leave

Paid parental leave

MacBook Pro

Home workstation budget €700

Learning budget €2000

Annual company-wide summit & offsites

Résumé du poste

United States Digital Space LLC is seeking a Platform Security Engineer to join our security program, working with the SRE team and engineering leadership. You will implement security tooling and processes, focusing on resilience against threats and incidents, to meet enterprise-grade security standards.

In this role you will own cloud and Kubernetes security, design guardrails, harden CI/CD and IaC, manage secrets, and develop incident response playbooks.

Qualifications

• 5+ years in infrastructure security, cloud security, or security engineering.
• Deep GCP and Kubernetes expertise.
• Strong networking fundamentals.
• Hands-on CI/CD and IaC hardening.
• Auth expertise — OAuth 2.0, OIDC, SAML.
• Policy-as-code experience — OPA, Kyverno.
• Detection and response background — SIEM, IDS.
• Compliance experience — SOC 2 Type II, ISO 27001, GDPR/PII data protection.
• Scripting proficiency — Python, Go, Bash.
• Interest in leveraging AI for security workflows.

Responsabilités

• Own cloud and Kubernetes security — IAM, RBAC, network policies, workload identity.
• Design secure-by-default platforms — guardrails and policy enforcement (OPA, Kyverno).
• Harden CI/CD and IaC pipelines — secure GitHub Actions, ArgoCD, Terraform.
• Lead secrets management — decoupled secrets architecture.
• Strengthen networking — VPC design and zero-trust segmentation.
• Build security-focused logging and monitoring.
• Implement runtime detection — IDS, file integrity monitoring.
• Develop incident response playbooks and runbooks.
• Manage and evolve the SIEM for signal-to-noise improvements.
• Audit and enforce privileged access management.

Connaissances

Infrastructure security

Cloud security

Security engineering

GCP

Kubernetes

Networking fundamentals

CI/CD hardening

IaC security

Auth/OAuth/OIDC

Policy as code

Scripting

Incident response

Compliance (SOC 2, ISO 27001, GDPR)

Outils

GKE

OPA

Kyverno

GitHub Actions

ArgoCD

Terraform

SIEM

IDS

Description du poste

United States Digital Space LLC is seeking a Platform Security Engineer to join our security program, working with the SRE team and engineering leadership. You will implement security tooling and processes, focusing on resilience against threats and incidents, to meet enterprise-grade security standards.

In this role you will own cloud and Kubernetes security, design guardrails, harden CI/CD and IaC, manage secrets, and develop incident response playbooks.