Platform Security Engineer — CI/CD & AI Safeguards

Voi Technology; Stockholms kommun; In loco; SEK 900.000 - 1.200.000; Tempo pieno

Vantaggi offerti da questo lavoro

Stock options

Descrizione del lavoro

VOI is seeking a Senior Platform Engineer to own the security toolchain across the software delivery lifecycle. You will work with the Platform & Information Security team to turn security into a paved, easy-to-use path for delivery teams.

The role focuses on SAST, secret scanning, KPI dashboards, and hardening infrastructure and CI/CD with a strong emphasis on AI-generated code risk management.

Competenze

• Fluency in a backend programming language (Go strongly preferred)
• Solid understanding of application security fundamentals (OWASP Top 10, secure SDLC)
• Hands-on experience with AppSec tooling: SAST, SCA, or secrets scanning (GitHub Advanced Security, Snyk or similar)
• Experience with Kubernetes and cloud infrastructure (GKE/GCP or equivalent)
• Builder's instinct to ship guardrails over policy documentation

Mansioni

• Verifying and triaging SAST, secret scanning, and dependency alerts; tuning rules to reduce false positives
• Hardening secure defaults via guardrails in CI/CD and infrastructure
• Building CI/CD security guardrails: signed builds, SBOM pipelines, deploy-time policy checks
• Building and maintaining security KPI dashboards for engineering and leadership
• Reviewing and hardening infrastructure and apps, including AI-generated code risks
• Evaluating and implementing AI capabilities to drive proactive and reactive security responses
• Empowering Security Champions with tooling and guidance

Conoscenze

Go

Security fundamentals

Kubernetes

Backend programming

Strumenti

GitHub Actions

ArgoCD

Grafana

Prometheus

Mimir

Jaeger

GKE

GCP

Snyk

GitHub Advanced Security

SAST

SCA

Descrizione del lavoro

VOI is seeking a Senior Platform Engineer to own the security toolchain across the software delivery lifecycle. You will work with the Platform & Information Security team to turn security into a paved, easy-to-use path for delivery teams.

The role focuses on SAST, secret scanning, KPI dashboards, and hardening infrastructure and CI/CD with a strong emphasis on AI-generated code risk management.