Platform Security Engineer

CFC- Chatham Financial Corporation; Kennett Square (Chester County); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Job summary

Chatham Financial is seeking a Platform Security Engineer to evolve our security platform within a cloud‑native SaaS business. You will design and implement security controls across Azure infrastructure, containers, and multi‑language applications, while maturing secure practices across the SDLC and CI/CD pipelines.

The role emphasizes hands‑on security engineering, collaboration with Engineering, Compliance, and IT, and strengthening SOC 2 compliance as the organization scales.

Qualifications

• 3+ years of experience in security engineering or related field.
• Experience with software or cloud engineering.
• Experience integrating security into CI/CD pipelines and developer tooling.
• Hands‑on expertise in cloud security (Azure required; AWS familiarity preferred).
• Experience securing modern application stacks, including .NET and containerized environments.
• Strong understanding of secure coding practices, threat modeling, and OWASP Top 10.
• Excellent collaboration and communication with engineering teams and Information Security.

Responsibilities

• Design, build, and implement security controls across Azure-based cloud infrastructure and platform-level services.
• Ship security-focused capabilities that are broadly used across the development platform.
• Mature cloud security and application security practices, including secure architecture patterns.
• Embed security into the SDLC by integrating into CI/CD pipelines and developer workflows.
• Implement cloud security scanning and posture management to prevent misconfigurations and vulnerabilities.
• Address emerging risks related to AI/LLM usage across the SDLC.
• Evaluate, implement, and operate Platform tooling with a focus on automation and scalability.
• Use AI to assist with learning, investigations, and coding tasks.
• Document Platform standards for secure coding.

Skills

Platform security

Cloud security

CI/CD security

SOC 2

Azure

Threat modeling

Container security

Tools

SAST

DAST

CSPM

Container scanners

Job description

Overview

We don’t simply hire employees. We invest in them. When you work at Chatham, we empower you — offering professional development opportunities to help you grow in your career, no matter if you've been here for five months or 15 years. Chatham has worked hard to create a distinct work environment that values people, teamwork, integrity, and client service. You will have immediate opportunities to partner with talented subject matter experts, work on complex projects, and contribute to the value Chatham delivers every day. We are seeking a Platform Security Engineer to evolve our security platform function within a growing financial risk and advisory SaaS business. This role is ideal for an engineer who thrives in a hands‑on environment and is motivated to build, scale, and mature security capabilities in a cloud‑native platform. You will join a small but growing team, designing and implementing security controls across cloud infrastructure, applications, and CI/CD pipelines. You will play a critical role in strengthening our security posture, ensuring compliance with SOC 2 requirements, and enabling engineering teams to build securely at scale.

What You’ll Do

• Design, build, and implement security controls across Azure-based cloud infrastructure, containerized environments, and .NET/Python/Javascript/React applications, all at the platform level for broad coverage
• Ship security-focused capabilities and features that are highly leveraged across the development platform
• Implement and mature cloud security and application security practices, including secure architecture patterns
• Collaborate cross‑functionally with Engineering, Compliance, and Information Security to embed security into the software development lifecycle (SDLC) by integrating security into CI/CD pipelines and developer workflows
• Implement cloud security scanning and posture management, to prevent misconfigurations, vulnerabilities, and drift across Azure environments
• Identify and address emerging risks related to AI/LLM usage across the SDLC
• Evaluate, implement, and operate Platform tooling, with a focus on automation and scalability
• Utilize AI to assist with all aspects of the engineering work: learning, investigations and debugging, creation and review of code
• Document Platform standards for secure coding

What Success Looks Like (First 12 Months)

• Reduced the burden of implementing secure coding for all Engineering teams
• Collaborated effectively with adjacent teams such as Information Security, Engineering, Governance/ Risk/Compliance and IT
• Prioritized effectively operational work alongside project development
• Implemented effective security controls via code within CI/CD pipelines and development workflows
• Strengthened and matured cloud and application security practices across the organization
• Maintained and improved robust policy scanning and vulnerability management practices
• Automated and maintained audit control evidence to meet SOC 2 requirements

What You Bring

• 3+ years of experience in security engineering, with a strong foundation in software or cloud engineering
• Experience building applications within the full Software Development Life Cycle (initial coding through production deployment and operations)
• Experience integrating security into CI/CD pipelines and developer tooling
• Hands‑on expertise in cloud security (Azure required; AWS familiarity preferred)
• Experience securing modern application stacks, including .NET applications and containerized environments
• Strong understanding of application security principles, including secure coding practices, threat modeling, and common vulnerabilities (OWASP Top 10)
• Strong problem‑solving skills with the ability to operate tactically
• Experience with security tooling such as SAST, DAST, container scanning, and cloud security posture management (CSPM)
• Excellent collaboration and communication skills, particularly in working with engineering teams and Information Security

About Chatham Financial

Chatham Financial is the leading independent capital markets advisor, delivering an integrated blend of expert advice and powerful technology to help you reduce risk and seize opportunity. With decades of capital markets strategy, execution, monitoring, and performance expertise, we serve as an unwavering advocate for your best interests and your innovation partner. Our technology platform unifies data across assets, debt, and derivatives, giving you unmatched agility, transparency, and insight. It’s clear ahead. Our commitment is to carry that light forward in every partnership, every solution, and every market we serve. We help guide the way—giving clients the insight and momentum to move forward with confidence, no matter what lies ahead. Chatham Financial is the leading independent capital markets advisor, delivering an integrated blend of expert advice and powerful technology to help you reduce risk and seize opportunity. With decades of capital markets strategy, execution, monitoring, and performance expertise, we serve as an unwavering advocate for your best interests and your innovation partner. Our technology platform unifies data across assets, debt, and derivatives, giving you unmatched agility, transparency, and insight. It’s clear ahead. Our commitment is to carry that light forward in every partnership, every solution, and every market we serve. We help guide the way—giving clients the insight and momentum to move forward with confidence, no matter what lies ahead.