Senior Platform Security Engineer

Full Scale; Cebu City; Remote; PHP 2,009,000 - 3,125,000; Full time

Job summary

Full Scale, a Philippines-based remote-first tech company, is seeking a Senior Platform Security Engineer to own security across a US-based healthcare SaaS platform. This hands-on IC role requires deep cloud and application security expertise and a track record of strengthening security architectures.

You'll collaborate with engineering, product, IT, and compliance teams, drive threat modeling, implement secure development practices, and act as the main technical security contact for customers,

Qualifications

• 6+ years in infrastructure or security with hands-on security engineering.
• Experience as Senior/Staff/Lead Security Engineer or similar.
• Cloud security architecture experience; Azure preferred, AWS acceptable.
• Proven ability to own security initiatives end-to-end without a separate architect.
• Strong knowledge: Kubernetes/AKS security and IAM.
• Proficiency with SAST/DAST, container scanning, and CI/CD security.
• WAF, network segmentation, IaC (Terraform/Bicep/ARM).
• Ability to communicate security risks to leadership, customers, and auditors.

Responsibilities

• Own security strategy and architecture across the platform.
• Secure cloud infrastructure (Azure preferred; AKS/Kubernetes) and related services.
• Improve application and API security with developers.
• Lead secure development practices across the SDLC.
• Manage vulnerabilities and access control, including IAM and least privilege.
• Lead security monitoring and incident response activities.
• Secure third-party integrations and vendor access.
• Represent technical security to customers, partners, and auditors.
• Support HIPAA, SOC 2, ISO 27001 compliance efforts.

Skills

Security engineering

Cloud security

Azure security

AWS security

Kubernetes security

Threat modeling

Authentication

API security

SAST/DAST

CI/CD security

Zero-trust

IaC security

Tools

Terraform

Bicep

ARM templates

Job description

Join one of the Philippines' fastest-growing tech companies! Open to Philippine-based candidates only.

About Us

Full Scale is a fully remote-first company that helps businesses build dedicated teams of skilled software engineers. We make it easier for growing companies to find, onboard, and retain high-performing software talent.

About the Role

We're looking for a Senior Platform Security Engineer to take ownership of technical security for a growing US-based healthcare SaaS company. The company provides a cloud-based medical imaging platform used by more than 3,000 healthcare practices. As the platform and engineering team continue to grow, you'll take the lead in building, strengthening, and maintaining its security architecture.

This is a hands-on senior individual contributor role. You'll work closely with engineering and leadership, independently identify security risks, design solutions, and drive security improvements across the platform. You'll also serve as the company's main technical security contact for customers, partners, and auditors.

What You'll Do

• Own security strategy and architecture: Assess the existing environment, identify risks, develop a prioritized security roadmap, and lead its implementation.
• Secure cloud infrastructure: Design and maintain security controls across cloud services (Azure preferred), AKS/Kubernetes, networking, databases, storage, WAF, and API gateways.
• Improve application and API security: Work with developers on secure application design, authentication, authorization, API protection, and tenant isolation.
• Lead secure development practices: Integrate security throughout the software development lifecycle, including threat modeling, design reviews, testing, validation, and release reviews.
• Manage vulnerabilities and access: Oversee vulnerability assessments, remediation priorities, identity and access management, privileged access, and least-privilege controls.
• Lead security monitoring and incident response: Develop detection and monitoring capabilities, investigate security incidents, and coordinate response and containment.
• Secure third-party integrations: Review partner connections, manage vendor access, and address security risks involving external systems.
• Represent technical security: Work with customers, partners, auditors, and internal teams on security reviews and technical discussions.
• Support security compliance: Collaborate with the compliance team on implementing and validating controls for HIPAA, SOC 2, and ISO 27001.

Requirements

• At least 6 years of experience in infrastructure or security, with strong hands-on experience in security engineering.
• Recent experience as a Senior, Staff, Lead, or Principal Security Engineer, Cloud Security Engineer, Platform Security Engineer, or similar role.
• Proven experience designing and implementing cloud security architecture. Azure is preferred, but strong hands‑on AWS security experience is also acceptable.
• Experience independently owning security initiatives, identifying risks, designing solutions, and driving implementation without relying on a separate security architect.
• Strong hands‑on knowledge of:
• Cloud Security: Azure security (Entra ID, RBAC, PIM, Key Vault, Defender for Cloud, Sentinel, managed identities, and private endpoints) or AWS security services and best practices.
• Kubernetes and AKS Security: Workload identity, Kubernetes RBAC, secrets management, network policies, ingress security, workload isolation, and runtime protection.
• Application and API Security: Authentication, authorization, BOLA/IDOR vulnerabilities, API protection, and multi‑tenant security.
• Security Tools and Practices: SAST, DAST, dependency and container scanning, secrets detection, vulnerability management, and CI/CD security.
• Network and Infrastructure Security: WAF, firewalls, network segmentation, zero‑trust principles, and infrastructure as code using Terraform, Bicep, or ARM.
• Monitoring and Incident Response: SIEM, cloud audit logs, security alerts, investigation, containment, and credential management.
• Experience working directly with software engineers to implement and validate security controls.
• Strong communication skills, with the ability to explain security risks, influence technical decisions, and confidently engage with leadership, customers, partners, and auditors.
• Comfortable remaining hands‑on and personally designing, configuring, testing, and validating security solutions.
• 100% remote work setup
• Work from anywhere in the Philippines
• Direct visibility and collaboration with the
• High‑impact role with significant technical ownership and autonomy
• Opportunity to work on a cloud‑native healthcare/SaMD platform
• Exposure to modern Azure, AKS, Kubernetes, and cloud security technologies
• Opportunity to work in a regulated, high‑assurance environment
• Collaboration with Engineering, Product, IT, Quality, and Compliance teams