Senior Platform Security Engineer

Boehringer Ingelheim GmbH; Philippines; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Boehringer Ingelheim GmbH, Philippines, seeks a Platform Security Engineer to secure cloud platforms, containerized environments, and software development ecosystems. You will engineer, operate, and enhance security capabilities while partnering with DevOps, platform engineering, and development teams.

You will advance DevSecOps, strengthen cloud security posture, and automate security processes across the SSDLC, ensuring robust controls are integrated throughout development and delivery

Qualifications

• Hands-on experience in DevSecOps, cloud security, platform security or a comparable engineering role.
• Practical experience with at least one major cloud provider and working knowledge of multi-cloud environments across AWS, Azure and GCP.
• Experience with Prisma Cloud or a comparable CNAPP/CSPM/CWPP platform is strongly desired.
• Experience with Kubernetes or OpenShift, container images, registries and container security controls.
• Knowledge of SSDLC and security testing concepts such as SAST, SCA, secrets detection, infrastructure-as-code scanning, image scanning, DAST or API security.
• Experience integrating and operating security controls in development and delivery workflows.
• Strong Python skills for automation, API integration, data processing and reporting.
• Working knowledge of Git, CI/CD concepts, Terraform or other infrastructure-as-code technologies, and REST APIs.
• Ability to analyse technical findings, distinguish relevant risk from noise and provide practical remediation guidance.
• ServiceNow or comparable service-management knowledge is advantageous but not mandatory.
• Excellent spoken and written English, strong collaboration skills and experience in an international, multicultural environment.
• Relevant cloud, Kubernetes, DevSecOps or security certifications are desirable but not mandatory.

Responsibilities

• Engineer, operate and continuously improve security capabilities across cloud platforms and SSDLC.
• Operate and improve CSPM platform, including cloud posture, workload protection and vulnerability management.
• Analyse cloud and workload findings, tune policies and support risk-based remediation with cloud and application teams.
• Support security for Kubernetes environments, including container images, registries and runtime controls.
• Develop Python automation and API integrations for onboarding, policy management and reporting.
• Create dashboards, runbooks, and ITSM-based workflows to support security operations.
• Collaborate with DevOps and platform teams to integrate security controls into delivery processes.
• Provide training and documentation to cloud, platform and development teams.
• Maintain security platforms, monitor service health, and coordinate vendor support cases.
• Follow Boehringer processes and maintain operational, compliance and audit documentation.

Skills

DevSecOps

Cloud security

Kubernetes

Python

CI/CD

Terraform

REST APIs

SAST/SCA

Security tooling

OpenShift

Tools

Prisma Cloud

Git

CI/CD tooling

Terraform

Job description

Join Boehringer Ingelheim's Cyber Intelligence & Security Operations Center (CISOC) as a Platform Security Engineer, where you will help secure cloud platforms, containerized environments, and software development ecosystems. In this role, you will engineer, operate, and continuously enhance cloud and application security capabilities while partnering closely with DevOps, platform engineering, and development teams.

You will play a critical role in advancing DevSecOps practices, strengthening cloud security posture, automating security processes, and ensuring security controls are effectively integrated throughout the Secure Software Development Lifecycle (SSDLC).

Duties & Responsibilities

As a member of the Cyber Intelligence & Security Operations Center (CISOC) team, the role will engineer, operate and continuously improve security capabilities across cloud platforms and the Secure Software Development Life Cycle (SSDLC).

• Operate and improve CSPM platform, including cloud posture, workload protection, vulnerability and misconfiguration management.
• Analyse cloud and workload findings, tune policies, manage justified exceptions and support risk-based remediation with cloud and application teams.
• Support security for Kubernetes environments, including container images, registries, cluster configurations, workload vulnerabilities and runtime controls.
• Engineer and maintain SSDLC security controls covering source code, open-source dependencies, secrets, infrastructure as code, container images, APIs and testing.
• Integrate security controls and actionable feedback into supported development and delivery workflows in collaboration with DevOps and platform teams.
• Administer security platforms, monitor service health and coverage, troubleshoot integrations and coordinate vendor support cases.
• Develop Python automation and API integrations for onboarding, policy management, data quality, reporting, workflow orchestration and repetitive operational tasks.
• Provide technical analysis, remediation guidance, training and documentation to cloud, platform and development teams.
• Create and maintain dashboards, reports, runbooks, standards and operational procedures, and support ITSM-based workflows where applicable.
• Collaborate across both focus areas to provide mutual coverage and ensure cloud, container and software-development risks are handled consistently.
• Follow Boehringer processes and maintain required operational, compliance and audit documentation.

Requirements:

An ideal candidate will have:

• Hands-on experience in DevSecOps, cloud security, platform security or a comparable engineering role.
• Practical experience with at least one major cloud provider and working knowledge of multi-cloud environments across AWS, Azure and GCP.
• Experience with Prisma Cloud or a comparable CNAPP/CSPM/CWPP platform is strongly desired.
• Experience with Kubernetes or OpenShift, container images, registries and container security controls.
• Knowledge of SSDLC and security testing concepts such as SAST, SCA, secrets detection, infrastructure-as-code scanning, image scanning, DAST or API security.
• Experience integrating and operating security controls in development and delivery workflows.
• Strong Python skills for automation, API integration, data processing and reporting.
• Working knowledge of Git, CI/CD concepts, Terraform or other infrastructure-as-code technologies, and REST APIs.
• Ability to analyse technical findings, distinguish relevant risk from noise and provide practical remediation guidance.
• ServiceNow or comparable service-management knowledge is advantageous but not mandatory.
• Excellent spoken and written English, strong collaboration skills and experience in an international, multicultural environment.
• Relevant cloud, Kubernetes, DevSecOps or security certifications are desirable but not mandatory.