Senior Platform Security Engineer: CI/CD Guardrails

Voi Technology AB; Stockholms kommun; On-site; SEK 900,000 - 1,500,000; Full time

Job summary

Voi Technology AB is seeking a Senior Platform Engineer to own the security toolchain across the software delivery lifecycle. You will work with the Platform & Information Security team to turn security into a paved road used by delivery teams, leveraging GCP, Go, GitHub Actions, ArgoCD, Grafana, and more.

You will harden defaults, build guardrails, and drive security KPI dashboards while addressing risks in AI-generated code and evolving attack surfaces.

Qualifications

• Experience building secure software delivery pipelines across multiple repos or services.
• Strong understanding of OWASP Top 10 and secure SDLC.
• Hands-on with AppSec tooling such as SAST/ SCA/ secrets scanning (GitHub Advanced Security, Snyk or similar).
• Experience with Kubernetes and cloud infrastructure (GKE/GCP or equivalent).
• A builder's instinct; prefer shipping guardrails over long policy docs.

Responsibilities

• Verifying and triaging SAST, secret scanning, and dependency alerts, tuning rules to cut false positives.
• Hardening paved-road service templates with secure defaults and gates.
• Building CI/CD security guardrails: signed builds, SBOM pipelines, deploy-time checks.
• Building and maintaining security KPI dashboards for engineering and leadership visibility.
• Proactively reviewing and hardening infrastructure and AI-generated code safety.
• Evaluating AI capabilities to improve proactive and reactive security responses.
• Enabling Security Champions with tooling and guidance.

Skills

Go language

Backend development

Application security

CI/CD security

Security dashboards

Tools

Kubernetes

GKE

GitHub Actions

ArgoCD

Snyk

Job description

Voi Technology AB is seeking a Senior Platform Engineer to own the security toolchain across the software delivery lifecycle. You will work with the Platform & Information Security team to turn security into a paved road used by delivery teams, leveraging GCP, Go, GitHub Actions, ArgoCD, Grafana, and more.

You will harden defaults, build guardrails, and drive security KPI dashboards while addressing risks in AI-generated code and evolving attack surfaces.