Platform Security Engineer: Kubernetes & Cloud

JobSpace; Christchurch; On-site; NZD 140,000 - 190,000; Full time

Benefits offered by this job

Healthy lunches

Wellness allowance

Parental leave

Parking or commuting allowance

Office spaces

Job summary

Partly is seeking a Platform Security Engineer to own our security posture while boosting platform reliability. You’ll be the first dedicated security hire, collaborating with the SRE team to harden systems and implement controls across Kubernetes, databases, and CI/CD.

You’ll run security audits (ISO 27001, SOC 2 in future), manage vulnerabilities, and build monitoring with Trivy, Falco, Kyverno, and more. Strong IaC (Terraform/GitOps) and cloud security (GCP) experience are essential.

Qualifications

• 5+ years in security engineering, platform engineering, or SRE with a security focus.
• Hands-on Kubernetes security experience with RBAC, network policies, and admission controllers.
• Experience with ISO 27001, SOC 2, or PCI-DSS compliance.
• Strong cloud security knowledge, with GCP preferred.
• Infrastructure-as-code using Terraform and GitOps workflows.

Responsibilities

• Keep Partly reliable and secure; participate in on-call and incident response planning.
• Lead security audits (ISO 27001, future SOC 2) and maintain continuous compliance with tools like Vanta.
• Harden infrastructure with least-privilege, Kubernetes RBAC refinements, and network segmentation.
• Manage vulnerability scanning and triage using Trivy, Renovate, and Falco; coordinate remediation.

Skills

Security engineering

Platform engineering

SRE

Kubernetes security

RBAC

Cloud security

Terraform

ArgoCD

GitOps

Communication

Rust

Go

Tools

Terraform

ArgoCD

GitOps

Cilium

Kyverno

Falco

Job description

Partly is seeking a Platform Security Engineer to own our security posture while boosting platform reliability. You’ll be the first dedicated security hire, collaborating with the SRE team to harden systems and implement controls across Kubernetes, databases, and CI/CD.

You’ll run security audits (ISO 27001, SOC 2 in future), manage vulnerabilities, and build monitoring with Trivy, Falco, Kyverno, and more. Strong IaC (Terraform/GitOps) and cloud security (GCP) experience are essential.