Senior Platform Security Engineer

Boehringer Ingelheim Business Services Philippines, Inc.; Muntinlupa; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Boehringer Ingelheim Business Services Philippines, Inc. is seeking a Platform Security Engineer to secure cloud platforms, containerized environments and software development ecosystems.

You will engineer, operate and continually improve security capabilities across SSDLC while partnering with DevOps, platform engineering and development teams. You will advance DevSecOps practices, strengthen cloud security posture, automate security processes and ensure controls are integrated throughout

Qualifications

• Hands-on DevSecOps and cloud security experience across major cloud providers (AWS/Azure/GCP).
• Experience with Prisma Cloud or CNAPP/CSPM/CWPP platform is strongly desired.
• Experience with Kubernetes or OpenShift, container images, registries and container security controls.
• Strong Python skills for automation, API integration, data processing and reporting.
• Knowledge of SSDLC and security testing concepts (SAST, SCA, secrets detection, IaC scanning, image scanning, DAST or API security).
• Experience integrating and operating security controls in development and delivery workflows.
• Working knowledge of Git, CI/CD concepts, Terraform or other IaC technologies, and REST APIs.
• Ability to analyse technical findings, distinguish risk from noise and provide practical remediation guidance.
• ServiceNow or comparable service-management knowledge is advantageous but not mandatory.
• Excellent spoken and written English, strong collaboration skills in an international environment.
• Cloud, Kubernetes, DevSecOps or security certifications are desirable but not mandatory.

Responsibilities

• Engineer, operate and continuously improve security capabilities across cloud platforms and SSDLC.
• Operate and improve CSPM platform and workload protection, vulnerability and misconfiguration management.
• Support security for Kubernetes environments, including container images, registries and runtime controls.
• Engineer and maintain SSDLC security controls covering code, dependencies, secrets, IaC, containers, APIs and testing.
• Integrate security controls into development and delivery workflows with DevOps and platform teams.
• Administer security platforms, monitor health, troubleshoot integrations and coordinate vendor support.
• Develop Python automation and API integrations for onboarding, policy management and reporting.
• Provide technical analysis, remediation guidance, training and documentation to cloud, platform and development teams.
• Create dashboards, runbooks, standards and procedures; support ITSM workflows where applicable.
• Collaborate across focus areas to ensure consistent handling of cloud, container and software-development risks.
• Follow Boehringer processes and maintain operational, compliance and audit documentation.

Skills

DevSecOps

Cloud security

Platform security

Python

CI/CD

Git

Terraform

REST APIs

Kubernetes

OpenShift

SAST/SCA/DAST

Automation

Tools

Prisma Cloud

Terraform

ServiceNow

Job description

The Position

Join Boehringer Ingelheim's Cyber Intelligence & Security Operations Center (CISOC) as a Platform Security Engineer, where you will help secure cloud platforms, containerized environments, and software development ecosystems. In this role, you will engineer, operate, and continuously enhance cloud and application security capabilities while partnering closely with DevOps, platform engineering, and development teams.

You will play a critical role in advancing DevSecOps practices, strengthening cloud security posture, automating security processes, and ensuring security controls are effectively integrated throughout the Secure Software Development Lifecycle (SSDLC).

Duties & Responsibilities

As a member of the Cyber Intelligence & Security Operations Center (CISOC) team, the role will engineer, operate and continuously improve security capabilities across cloud platforms and the Secure Software Development Life Cycle (SSDLC).

• Operate and improve CSPM platform, including cloud posture, workload protection, vulnerability and misconfiguration management.
• Analyse cloud and workload findings, tune policies, manage justified exceptions and support risk-based remediation with cloud and application teams.
• Support security for Kubernetes environments, including container images, registries, cluster configurations, workload vulnerabilities and runtime controls.
• Engineer and maintain SSDLC security controls covering source code, open-source dependencies, secrets, infrastructure as code, container images, APIs and testing.
• Integrate security controls and actionable feedback into supported development and delivery workflows in collaboration with DevOps and platform teams.
• Administer security platforms, monitor service health and coverage, troubleshoot integrations and coordinate vendor support cases.
• Develop Python automation and API integrations for onboarding, policy management, data quality, reporting, workflow orchestration and repetitive operational tasks.
• Provide technical analysis, remediation guidance, training and documentation to cloud, platform and development teams.
• Create and maintain dashboards, reports, runbooks, standards and operational procedures, and support ITSM-based workflows where applicable.
• Collaborate across both focus areas to provide mutual coverage and ensure cloud, container and software-development risks are handled consistently.
• Follow Boehringer processes and maintain required operational, compliance and audit documentation.

Requirements

An ideal candidate will have:

• Hands-on experience in DevSecOps, cloud security, platform security or a comparable engineering role.
• Practical experience with at least one major cloud provider and working knowledge of multi-cloud environments across AWS, Azure and GCP.
• Experience with Prisma Cloud or a comparable CNAPP/CSPM/CWPP platform is strongly desired.
• Experience with Kubernetes or OpenShift, container images, registries and container security controls.
• Knowledge of SSDLC and security testing concepts such as SAST, SCA, secrets detection, infrastructure-as-code scanning, image scanning, DAST or API security.
• Experience integrating and operating security controls in development and delivery workflows.
• Strong Python skills for automation, API integration, data processing and reporting.
• Working knowledge of Git, CI/CD concepts, Terraform or other infrastructure-as-code technologies, and REST APIs.
• Ability to analyse technical findings, distinguish relevant risk from noise and provide practical remediation guidance.
• ServiceNow or comparable service-management knowledge is advantageous but not mandatory.
• Excellent spoken and written English, strong collaboration skills and experience in an international, multicultural environment.
• Relevant cloud, Kubernetes, DevSecOps or security certifications are desirable but not mandatory.