Senior Platform Engineer

Voi Technology; Stockholms kommun; On-site; SEK 900,000 - 1,200,000; Full time

Benefits offered by this job

Stock options

Job summary

VOI is seeking a Senior Platform Engineer to own the security toolchain across the software delivery lifecycle. You will work with the Platform & Information Security team to turn security into a paved, easy-to-use path for delivery teams.

The role focuses on SAST, secret scanning, KPI dashboards, and hardening infrastructure and CI/CD with a strong emphasis on AI-generated code risk management.

Qualifications

• Fluency in a backend programming language (Go strongly preferred)
• Solid understanding of application security fundamentals (OWASP Top 10, secure SDLC)
• Hands-on experience with AppSec tooling: SAST, SCA, or secrets scanning (GitHub Advanced Security, Snyk or similar)
• Experience with Kubernetes and cloud infrastructure (GKE/GCP or equivalent)
• Builder's instinct to ship guardrails over policy documentation

Responsibilities

• Verifying and triaging SAST, secret scanning, and dependency alerts; tuning rules to reduce false positives
• Hardening secure defaults via guardrails in CI/CD and infrastructure
• Building CI/CD security guardrails: signed builds, SBOM pipelines, deploy-time policy checks
• Building and maintaining security KPI dashboards for engineering and leadership
• Reviewing and hardening infrastructure and apps, including AI-generated code risks
• Evaluating and implementing AI capabilities to drive proactive and reactive security responses
• Empowering Security Champions with tooling and guidance

Skills

Go

Security fundamentals

Kubernetes

Backend programming

Tools

GitHub Actions

ArgoCD

Grafana

Prometheus

Mimir

Jaeger

GKE

GCP

Snyk

GitHub Advanced Security

SAST

SCA

Job description

YOUR MISSION AT VOI

As Senior Platform Engineer, you'll own Voi's security toolchain end-to-end across the software delivery lifecycle. You'll join our Platform & Information Security team, working alongside platform engineers and security champions embedded across engineering, turning security from a checklist into a paved road that delivery teams actually want to use. Our stack includes GCP, Golang, GitHub Actions, ArgoCD, Grafana, Prometheus, Mimir, and Jaeger. We're in the middle of rolling out GitHub Advanced Security as our core AppSec toolchain, and increasingly need to reason about risk in code that's partly or wholly AI-generated, both defensively (reviewing it) and offensively (AI-assisted attacks are already showing up in our bug bounty inbound).

This Will Include

• Verifying and triaging SAST, secret scanning, and dependency alerts, tuning rules to cut false positives, and partnering with code owners to remediate findings across all repos


• Hardening our paved-road service template so secure defaults (secrets handling, authn middleware, observability, security-checks-pass merge gates) are the easy path, not an opt-in


• Building CI/CD security guardrails: signed builds, SBOM pipelines, deploy-time policy checks, provenance.


• Building and maintaining security KPI dashboards for engineering and leadership visibility


• Proactively reviewing and hardening infrastructure and application security including addressing risks in AI-generated code


• Evaluating and implementing AI capabilities to drive proactive and reactive response in a world where offensive AI capabilities are commonly available.


• Enabling our Security Champions with tooling and guidance, not just policy

What You Need To Embark

• Fluency in a backend programming language (Go strongly preferred, given our stack)


• Solid understanding of application security fundamentals (OWASP Top 10, secure SDLC)


• Hands-on experience with AppSec tooling: SAST, SCA, or secrets scanning (GitHub Advanced Security, Snyk or similar)


• Experience with Kubernetes and cloud infrastructure (GKE/GCP or equivalent)


• A builder's instinct, you'd rather ship a guardrail than write a policy doc

WHY VOI?

• Join Europe's #1 micromobility operator and one of the fastest-growing scaleups.


• Get \"skin in the game\" through our employee stock options program and play a key role in driving continued success in Germany - Europe's biggest market.


• Be part of a supportive, motivated and fun team working together towards a shared mission.


• Join the micromobility revolution and be a part of creating sustainable cities made for living, free from noise and pollution.

Since 2018, Voi has been on a mission to create safe, sustainable and reliable micromobility for everyone. Today we are the leading shared micromobility operator in Europe, with HQ in Stockholm (Sweden), operating 200,000+ vehicles in 130+ towns and cities across 13 countries, serving 8+ million riders with over 500+ MILLION rides to date, and we have no intention of stopping here! We believe that micromobility will play a central role in changing how people move in our towns and cities in the future and want to ensure that the micromobility transformation happens the right way - through real innovative technology, partnership and transparent dialogue with towns, cities and governments, and by adapting our products to the local needs. In addition to improving quality of life in cities around the world, we are contributing to the solution for climate change by making sustainable transportation options more widely available and promoting renewable energy use and circularity along our supply chain.

Diversity Matters

As a Voiager, we offer you a friendly, collaborative and fast-paced workplace where you can bring your whole self to work, regardless of gender, age, ethnicity, religion, disability or sexual orientation - and welcome applications from whoever you are, including veterans, those actively serving as a Reservist and their partners. What is most important to us is how you treat others and what skills and value you bring to our team. We believe that having a wide diversity of people with different backgrounds and perspectives within Voi is essential to our success in delivering the best user experience to our equally diverse user base. With employees from over 50 nationalities working within Voi, we believe we have made good progress but know we can still do more - therefore we discourage any photos, personal letters, or disclosure of any information that concerns other information than your professional experience.