Senior Platform Security Engineer (Cloud)

ME; Bengaluru; Hybrid; INR 1,800,000 - 2,600,000; Full time

Benefits offered by this job

Retirement Plans

Medical, Dental and Vision Coverage

Paid Time Off

Paid Parental Leave

Support for Community Involvement

Job summary

Skyhigh Security is seeking a Senior Platform Security Engineer (Cloud) to own security standards for non-production environments and build automated validation frameworks that keep engineering spaces secure.

You will work with Engineering Managers, Security Champions, and the Central CISO to ensure practical, transparent controls integrated into the developer experience, with a strong emphasis on IaC, cloud security architecture, and container security.

Qualifications

• 5 to 8 years of industry experience
• Experience in DevSecOps or cloud security engineering
• Experience designing automated security controls at scale
• Strong stakeholder management skills
• Knowledge of threat modeling and secure lab environments
• Hands-on security expertise across cloud platforms

Responsibilities

• Author and update non-production security policies and guardrails
• Design automated validation frameworks and compliance checks
• Mobilize local security champions across teams
• Architect reusable security capabilities for shared labs and cloud environments
• Monitor emerging threats and adapt platforms accordingly
• Act as liaison between engineering and central security teams

Skills

DevSecOps

Cloud security

Security architecture

Threat modeling

Stakeholder management

Leadership

Tools

AWS Cloud Security

Open Policy Agent

Kyverno

Artifactory

Black Duck

ArgoCD

Harness

Jenkins

Terraform

Ansible

Puppet

Okta

Job description

Job Title

Senior Platform Security Engineer (Cloud)

About Skyhigh Security

Skyhigh Security is a dynamic, fast-paced, cloud company that is a leader in the security industry. Our mission is to protect the world’s data, and because of this, we live and breathe security. We value learning at our core, underpinned by openness and transparency. Since 2011, organizations have trusted us to provide them with a complete, market-leading security platform built on a modern cloud stack. Our industry-leading suite of products radically simplifies data security through easy-to-use, cloud-based, Zero Trust solutions that are managed in a single dashboard, powered by hundreds of employees across the world. With offices in Santa Clara, Aylesbury, Paderborn, Bengaluru, Sydney, Tokyo and more, our employees are the heart and soul of our company. Skyhigh Security Is more than a company; here, when you invest your career with us, we commit to investing in you. We embrace a hybrid work model, creating the flexibility and freedom you need from your work environment to reach your potential. From our employee recognition program, to our ‘Blast Talks' learning series, and team celebrations (we love to have fun!), we strive to be an interactive and engaging place where you can be your authentic self. We are on these too! Follow us on LinkedIn and Twitter@SkyhighSecurity.

Role Overview

Skyhigh Security is hiring a Senior Platform Security Engineer to join our Engineering Excellence organization, reporting to the Senior Manager of Engineering Environments and Tooling. In this high-impact, hands-on engineering role, you will be the primary custodian of the security, integrity, and automated guardrails of our non-production cloud environments, ensuring our developer spaces are both highly enabling and thoroughly secure. Rather than just reviewing GRC checklists or writing static policy documents, you will own the technical security standards for our platforms and build the automated validation frameworks that keep our engineering organization secure over the long term. Your impact will be measured by your ability to drive continuous, automated compliance, empower a distributed network of local security champions, and build robust, secure-by-default capabilities for our shared cloud resources. You must have deep, hands-on expertise in cloud security architecture, infrastructure-as-code, and container security to lead this initiative. You will build highly collaborative relationships with Engineering Managers, Security Champions, and the Central CISO team to ensure that platform security controls are highly practical, transparent, and seamlessly integrated into the developer experience.

Responsibilities

• Engineer Environment Security Standards: Author, maintain, and continuously update the technical platform security policies governing all non-production environments and developer labs.
• Design Automated Validation Frameworks: Establish, run, and scale the technical auditing and drift-detection functions to ensure all engineering teams maintain compliance with security guardrails over months and years.
• Lead Security Champions: Mobilize and align local security champions across engineering teams, guiding them as they design, own, and execute their local environment security plans.
• Architect Shared Security Capabilities: Architect and build advanced, reusable security capabilities for shared resources, common labs, and core cloud environments, ensuring a secure baseline for the entire organization.
• Continuous Improvement: Monitor emerging security threats and regulatory changes, proactively adapting non-production platforms and policies to address new risks.
• Bridge Engineering and Security: Act as the primary technical liaison between the core engineering teams and the central security organization for environments, translating corporate mandates into pragmatic engineering practices.

Requirements

• 5 to 8 years of industry experience
• Proven Technical Leadership: Extensive hands-on experience in DevSecOps, cloud security engineering, or systems engineering with a strong focus on securing dynamic non-production infrastructure.
• Platform Security Design: Demonstrated experience writing technical security standards and designing sustainable, automated configuration-auditing frameworks at scale.
• Influence Without Authority: Exceptional stakeholder management skills, with a proven track record of guiding distributed engineering teams and motivating local security champions.
• Advanced Security Architecture: Deep knowledge of threat modeling, network segmentation, secrets management, and access control strategies within test and lab environments.
• Strategic & Methodical Thinking: Ability to balance developer velocity and flexibility in labs with rigorous, automated security requirements.

Tooling Requirements

Deep Core Expertise

• AWS Cloud Security: Advanced knowledge of securing AWS environments, complex IAM policies, strict Security Group configurations, and secure-by-default VPC routing
• Hybrid Security Boundaries: Experience establishing secure, key-only SSH Jumphosts, SSH tunnels, and managing secure client certificate structures
• Software Supply Chain Security: Experience leveraging Artifactory to govern open-source dependencies, and Black Duck to enforce vulnerability checking.
• Container Security & GitOps: Hands-on experience securing containers, image registries, and driving continuous delivery pipelines via ArgoCD, Harness, or Jenkins
• Policy-as-Code & Compliance: Experience implementing compliance-checking tooling (e.g., Open Policy Agent (OPA), Kyverno, AWS Config, or custom auditing scripts).

Broad / Functional Competency

• On-Premises Infrastructure Tools: Conceptual understanding of virtualization structures, Docker registries, on-premise Kubernetes clusters managed via Helm charts, and automated virtual machine configurations
• Infrastructure-as-Code & Configuration: General ability to review and work within Terraform, Ansible, or Puppet configurations.
• Secrets & Identity Management: Working familiarity with secrets vaults, Active Directory, or Okta.

Company Benefits And Perks

• Retirement Plans
• Medical, Dental and Vision Coverage
• Paid Time Off
• Paid Parental Leave
• Support for Community Involvement

We're serious about our commitment to a workplace where everyone can thrive and contribute to our industry-leading products and customer support, which is why we prohibit discrimination and harassment based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.

Our Commitment To You

At Skyhigh Security, we are committed to creating a safe and trustworthy experience for our customers, employees, and candidates. Please be aware that fraudulent recruiting activity can occur through fake job postings or impersonated communications. Skyhigh Security conducts interviews through professional channels only and does not use text messages, instant messaging, or group chats for interviews. We will never request sensitive personal information—such as your date of birth, Social Security number, or national ID number—during the interview process. Skyhigh Security also does not require candidates to pay fees, purchase products or services, or process payments of any kind as part of the recruiting or hiring process. And Skyhigh Security will never keep any original work authorization documents that we may be required to review during the hiring process.