Platform Security Engineer — Cloud-Native & Kubernetes

Neo4j, Inc.; Greater London; Hybride; GBP 90 000 - 120 000; Plein temps

Résumé du poste

Neo4j is building a secure cloud-native platform and is seeking a security engineer to shape the security baseline across cloud and Kubernetes environments. You’ll contribute to secure-by-design tooling, guardrails, and policy enforcement while partnering with Aura and Platform teams.

You’ll apply hands-on expertise in containers, K8s, IaC and modern authentication/secret-management practices to strengthen the product across the entire development lifecycle.

Qualifications

• Experience with containers, Kubernetes, IaC and languages like Go/Java/Python.
• Security engineering background with hands-on involvement.
• Strong cloud, infrastructure and/or network security background.

Responsabilités

• Develop cloud-native controls to enforce the security baseline at scale.
• Enhance product security along the SDLC with paved roads and additional security requirements for containerised services.
• Define and implement Cloud/K8s native policies (e.g., Kyverno, PSP).
• Conduct security assessments, audits and architecture reviews to improve security posture.
• Support incident detection and response by maintaining cloud monitoring and creating troubleshooting scripts.
• Advise Platform and Engineering teams on cloud/K8s security design and best practices.

Connaissances

Containers

Kubernetes

Infrastructure as Code

Go

Java

Python

Cloud security

OIDC/OAuth2

Secrets management

Admission controllers

Service mesh

mTLS

IAM solutions

Kubernetes hardening

APIs & microservices

Outils

Kyverno

Pod Security Standards

Description du poste

Neo4j is building a secure cloud-native platform and is seeking a security engineer to shape the security baseline across cloud and Kubernetes environments. You’ll contribute to secure-by-design tooling, guardrails, and policy enforcement while partnering with Aura and Platform teams.

You’ll apply hands-on expertise in containers, K8s, IaC and modern authentication/secret-management practices to strengthen the product across the entire development lifecycle.