Platform Security Engineer

Chatham Financial; Kennett Square (Chester County); On-site; USD 120,000 - 180,000; Full time

Job summary

Chatham Financial is seeking a Platform Security Engineer to evolve our security platform within a cloud-native SaaS environment. You will design and implement security controls across Azure-based infrastructure, containerized environments, and CI/CD pipelines, enabling secure development at scale.

You will strengthen SOC 2 compliance, collaborate with Engineering and Information Security, and apply SAST/DAST, CSPM, and secure coding practices to reduce risk across the platform.

Qualifications

• 3+ years of security engineering experience in software or cloud environments.
• Experience integrating security into CI/CD pipelines and developer tooling.
• Hands-on cloud security experience (Azure required; AWS familiarity welcome).
• Experience securing modern application stacks including .NET and containerized environments.
• Strong understanding of secure coding, threat modeling, and OWASP Top 10.
• Familiarity with security tooling such as SAST, DAST, container scanning, and CSPM.
• Excellent collaboration and communication with engineering and information security teams.

Responsibilities

• Design, build, and implement security controls across Azure-based cloud infrastructure, containers, and CI/CD pipelines.
• Ship security-focused capabilities leveraged across the development platform.
• Implement and mature cloud security and application security practices.
• Collaborate with Engineering, Compliance, and Information Security to embed security in the SDLC and CI/CD workflows.
• Implement cloud security scanning and posture management to prevent misconfigurations and drift.
• Address emerging risks related to AI/LLM usage across the SDLC.
• Evaluate and operate platform tooling with a focus on automation and scalability.
• Utilize AI to assist with learning, investigations, and code review.
• Document platform standards for secure coding.

Skills

Security engineering

CI/CD security

Azure cloud

Application security

OWASP Top 10

Container security

SAST/DAST

Cloud posture management

Tools

SAST tooling

DAST tooling

Container scanning

CSPM tooling

Job description

Job Description:

Overview:

We don't simply hire employees. We invest in them. When you work at Chatham, we empower you - offering professional development opportunities to help you grow in your career, no matter if you've been here for five months or 15 years. Chatham has worked hard to create a distinct work environment that values people, teamwork, integrity, and client service. You will have immediate opportunities to partner with talented subject matter experts, work on complex projects, and contribute to the value Chatham delivers every day.

We are seeking a Platform Security Engineer to evolve our security platform function within a growing financial risk and advisory SaaS business. This role is ideal for an engineer who thrives in a hands-on environment and is motivated to build, scale, and mature security capabilities in a cloud-native platform.

You will join a small but growing team, designing and implementing security controls across cloud infrastructure, applications, and CI/CD pipelines. You will play a critical role in strengthening our security posture, ensuring compliance with SOC 2 requirements, and enabling engineering teams to build securely at scale.

What You'll Do

• Design, build, and implement security controls across Azure-based cloud infrastructure, containerized environments, and .NET/Python/Javascript/React applications, all at the platform level for broad coverage
• Ship security-focused capabilities and features that are highly leveraged across the development platform
• Implement and mature cloud security and application security practices, including secure architecture patterns
• Collaborate cross-functionally with Engineering, Compliance, and Information Security to embed security into the software development lifecycle (SDLC) by integrating security into CI/CD pipelines and developer workflows
• Implement cloud security scanning and posture management, to prevent misconfigurations, vulnerabilities, and drift across Azure environments
• Identify and address emerging risks related to AI/LLM usage across the SDLC
• Evaluate, implement, and operate Platform tooling, with a focus on automation and scalability
• Utilize AI to assist with all aspects of the engineering work: learning, investigations and debugging, creation and review of code
• Document Platform standards for secure coding

What Success Looks Like (First 12 Months)

• Reduced the burden of implementing secure coding for all Engineering teams
• Collaborated effectively with adjacent teams such as Information Security, Engineering, Governance/Risk/Compliance and IT
• Prioritized effectively operational work alongside project development
• Implemented effective security controls via code within CI/CD pipelines and development workflows
• Strengthened and matured cloud and application security practices across the organization
• Maintained and improved robust policy scanningand vulnerability management practices
• Automated and maintained audit control evidence to meet SOC 2 requirements

What You Bring

• 3+ years of experience in security engineering, with a strong foundation in software or cloud engineering
• Experience building applications within the full Software Development Life Cycle (initial coding through production deployment and operations)
• Experience integrating security into CI/CD pipelines and developer tooling
• Hands-on expertise in cloud security (Azure required; AWS familiarity preferred)
• Experience securing modern application stacks, including .NET applications and containerized environments
• Strong understanding of application security principles, including secure coding practices, threat modeling, and common vulnerabilities (OWASP Top 10)
• Strong problem-solving skills with the ability to operate tactically
• Experience with security tooling such as SAST, DAST, container scanning, and cloud security posture management (CSPM)
• Excellent collaboration and communication skills, particularly in working with engineering teams and Information Security

About Chatham Financial:

Chatham Financial is the leading independent capital markets advisor, delivering an integrated blend of expert advice and powerful technology to help you reduce risk and seize opportunity. With decades of capital markets strategy, execution, monitoring, and performance expertise, we serve as an unwavering advocate for your best interests and your innovation partner. Our technology platform unifies data across assets, debt, and derivatives, giving you unmatched agility, transparency, and insight.

It's clear ahead.

Our commitment is to carry that light forward in every partnership, every solution, and every market we serve.

We help guide the way-giving clients the insight and momentum to move forward with confidence, no matter what lies ahead.