Platform Security Engineer — CI/CD & AI Safeguards

Voi Technology; Stockholms kommun; On-site; SEK 900,000 - 1,200,000; Full time

Benefits offered by this job

Stock options

Job summary

VOI is seeking a Senior Platform Engineer to own the security toolchain across the software delivery lifecycle. You will work with the Platform & Information Security team to turn security into a paved, easy-to-use path for delivery teams.

The role focuses on SAST, secret scanning, KPI dashboards, and hardening infrastructure and CI/CD with a strong emphasis on AI-generated code risk management.

Qualifications

• Fluency in a backend programming language (Go strongly preferred)
• Solid understanding of application security fundamentals (OWASP Top 10, secure SDLC)
• Hands-on experience with AppSec tooling: SAST, SCA, or secrets scanning (GitHub Advanced Security, Snyk or similar)
• Experience with Kubernetes and cloud infrastructure (GKE/GCP or equivalent)
• Builder's instinct to ship guardrails over policy documentation

Responsibilities

• Verifying and triaging SAST, secret scanning, and dependency alerts; tuning rules to reduce false positives
• Hardening secure defaults via guardrails in CI/CD and infrastructure
• Building CI/CD security guardrails: signed builds, SBOM pipelines, deploy-time policy checks
• Building and maintaining security KPI dashboards for engineering and leadership
• Reviewing and hardening infrastructure and apps, including AI-generated code risks
• Evaluating and implementing AI capabilities to drive proactive and reactive security responses
• Empowering Security Champions with tooling and guidance

Skills

Go

Security fundamentals

Kubernetes

Backend programming

Tools

GitHub Actions

ArgoCD

Grafana

Prometheus

Mimir

Jaeger

GKE

GCP

Snyk

GitHub Advanced Security

SAST

SCA

Job description

VOI is seeking a Senior Platform Engineer to own the security toolchain across the software delivery lifecycle. You will work with the Platform & Information Security team to turn security into a paved, easy-to-use path for delivery teams.

The role focuses on SAST, secret scanning, KPI dashboards, and hardening infrastructure and CI/CD with a strong emphasis on AI-generated code risk management.