Software Engineer - Platform Security

Neo4j Inc; Malmö kommun; On-site; SEK 90,000 - 130,000; Full time

Job summary

Neo4j Inc is seeking experienced engineers in Malmö to enhance security through cloud-native controls and secure design practices. The ideal candidate will have a strong security engineering background, familiarity with Kubernetes, and experience in cloud environments like Azure, AWS, or GCP.

The role involves collaboration with teams to implement security policies and conduct assessments to improve the security posture. This position offers the chance to work on cutting-edge cloud security solutions.

Qualifications

• Experience with Cloud, Infrastructure, or Network security.
• Hands-on experience in security engineering and decision-making.
• Familiarity with cloud-native authentication mechanisms.

Responsibilities

• Develop cloud-native controls in Azure, AWS, or GCP to enforce security baseline.
• Enhance product security in the software development lifecycle.
• Act as a subject matter expert for security guidance.
• Collaborate to define and implement cloud-native policies.
• Conduct security assessments and audits.
• Support incident detection and response processes.

Skills

Containers

Kubernetes

Infrastructure-as-Code

Go

Java

Python

Job description

Role Overview

We’re hiring experienced engineers with a security mindset to expand our tooling, add new guardrails, and partner with Aura teams on secure design.

Responsibilities

• Develop cloud-native controls in Azure, AWS and/or GCP to enforce the security baseline at scale, integrating with open-source and vendor tools as needed.
• Enhance product security along the software development lifecycle by creating paved roads and defining additional security and software excellence requirements for containerised services running on multiple managed Kubernetes clusters.
• Act as a subject matter expert for the Platform and Engineering teams by providing guidance on cloud and k8s services, secure infrastructure‑as‑code, modern secure AuthZ/AuthN techniques (SPIFFE) and secrets management solutions.
• Collaborate with other teams to define and implement Cloud/K8s native policies and procedures (Kyverno, Pod Security Standards).
• Conduct security assessments, audits and architecture reviews in order to introduce new cloud controls in the platform and make recommendations to improve the overall security posture.
• Support the incident detection and response process by maintaining cloud monitoring and alerting tooling and developing scripts needed for troubleshooting and resolution of incidents and security issues.

Ideal Candidate

• Experience with Containers, Kubernetes, Infrastructure‑as‑Code and programming languages such as Go, Java and/or Python.
• Proven experience in a security engineering role with hands‑on technical involvement, and exposure to decision making processes.
• An active interest and background in Cloud, Infrastructure and/or Network security.
• Proven track record with cloud‑native authentication mechanisms (OIDC, OAuth2), secrets management, admission controllers, service mesh, mTLS and cloud based IAM solutions.
• Familiarity with securing and hardening K8s clusters, containerised applications and Linux hosts.
• Demonstrated ability to architect cloud‑native applications including the design of APIs and microservices on containers.