Platform Security Engineer

Luxor Technology Corporation; Oregon; Hybrid; USD 140,000 - 190,000; Full time

Job summary

Luxor Technology Corporation is seeking a Senior Platform Security Engineer to own security and compliance for the platform team. You will influence security across CI/CD, IaC, cloud configurations, and incident response while partnering with engineering. This fully remote U.S. role supports a fast-growing startup and reports to the CTO.

You will build automated security tests, guard governance, and drive policy-as-code initiatives, enabling secure delivery without slowing velocity.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or equivalent experience.
• 8+ years in DevOps, software engineering, or security engineering.
• Experience with GitHub Actions, Terraform, Ansible.
• Proficiency in Go, JavaScript, Rust, or Python.
• Hands-on cloud security across major providers and IAM, containerization, and monitoring.

Responsibilities

• Advise on security requirements during sprint planning and design reviews.
• Build and maintain automated security testing in CI/CD (SAST/DAST, SCA).
• Manage cloud monitoring tooling and patching/hardening integration.
• Audit environments for internal and external compliance requirements.
• Implement cloud detection, response monitoring, and act as incident responder.
• Document controls and decisions to build institutional knowledge.
• Enforce policies using device management and IAM controls.

Skills

CI/CD tools

Terraform

Configuration management

Go

JavaScript

Python

Cloud security

Kubernetes

Penetration testing

Scripting (Bash)

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

GitHub Actions

Ansible

Kubernetes

Flux / ArgoCD

Terraform

Tailscale

Cloudflare WARP

SIEM

Job description

The Luxor team has built a range of solutions for compute power, including a mining pool, custom firmware, an ASIC brokerage desk, Hashrate derivatives and compute to power CI and agents. We service clients across the globe. Our client base is growing rapidly and as such we are looking to expand our platform engineering team. We’re looking for a Senior Platform Security Engineer with strong expertise in security and compliance. You’ll join Luxor AI’s Platform team and own the entire area of security and compliance within the team’s scope, contributing to building and running production infrastructure. This role is ideal for someone who has experienced how security and compliance operate within a large organization and now seeks the autonomy to evolve that function at a fast‑growing startup. It will suit an individual energized by the importance of the data we protect and the reliability we provide to our clients. This role will report directly to the Chief Technology Officer. This is a fully remote role based in U.S.A. with seldom travel if needed.

Responsibilities

• Serve as a day‑to‑day security advisor for the team you support, advocating security requirements as an engineering team member during sprint planning, architecture reviews, process discussions, product direction, design decisions, and while work is in flight
• Build and maintain centralized automated security testing and enforcement in CI/CD, including static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), secrets scanning, and infrastructure‑as‑code (IaC) scanning
• Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate ongoing patching and hardening into engineering operations
• Continually audit application environments and development processes to ensure compliance with internal and external requirements, and alignment with security standard methodologies
• Implement and maintain cloud detection and response monitoring, and act as an incident CIRT responder
• Document controls, configurations, and decisions to build durable institutional knowledge
• Enforce policies and detection using device management tooling (e.g. FleetMDM)

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience
• 8+ years of experience in DevOps, software engineering, or security engineering
• Proficiency with CI/CD platforms (e.g. GitHub Actions), infrastructure as code tools (e.g.,Terraform), and configuration management (e.g. Ansible)
• Proficiency in at least two of the following languages: Go, JavaScript, Rust, Python
• Hands‑on cloud security experience in GCP, Alibaba, AWS, OVH, Hetzner and/or Azure, including identity and access management, containerization, network security controls, encryption, logging, and monitoring
• Harden access and controls (e.g. IAM Policy)
• Hands‑on experience with Kubernetes GitOps (e.g. Flux, ArgoCD)
• Demonstrated experience implementing automated application and infrastructure security testing, secrets management, and policy‑as‑code enforcement
• Familiarity with penetration testing applications or experience conducting penetration testing engagements
• Strong scripting skills in Python, or Bash for automation and integration
• Experience supporting third‑party attestations and audits (e.g., SOC 2 Type 2, ISO 27001), including preparation, implementation, and ongoing evidence collection
• Operated and maintained Zero Trust network infrastructures using Tailscale and Cloudflare WARP, providing direct technical support to users while managing access policies and troubleshooting remote connectivity issues.
• Deployed, configured, and administered SIEM (Security Information and Event Management).
• Strong communication and governance skills, with the ability to translate technical risk into business terms for technical and non‑technical audiences, and to advocate for security without slowing down delivery

At Luxor we believe that meaningful contributions can be made by anyone. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Luxor welcomes all!Luxor does not accept unsolicited headhunter and agency resumes. Luxor will not pay any third‑party agency or company that does not have a signed agreement with Luxor.

How we use AI in our hiring process

We use AI tools to support certain parts of our hiring process, and we believe in being transparent about how they're used. During your application, AI may assist in reviewing CVs, qualifications, and assignments by providing additional insights, but it does not make decisions, every application is evaluated at each step by a member of our hiring team. We also use AI to transcribe interviews so our team can stay focused on the conversation rather than note‑taking. Any voice recordings are automatically deleted within 15 days. In addition, AI helps us keep candidates informed about their application status and helps us understand how our process is working so we can improve it over time. In all cases, AI is used to support efficiency and consistency, not to replace human judgment. If you have any questions about how we use these tools or your data, or if you would prefer to opt out of any of these features, please include them in the dedicated section of the application form, and we’ll follow up accordingly.