Platform Security Engineer

Luxor Technology Corp.; United States; Remote; USD 170,000 - 250,000; Full time

Job summary

Luxor Technology Corp. is seeking a Senior Platform Security Engineer to own security and compliance across production infrastructure. You will guide security practices in CI/CD, IaC, and cloud environments, and lead incident response efforts while collaborating with engineering teams.

The role emphasizes autonomy to evolve security functions at a fast-growing startup, reporting to the CTO. This is a fully remote position based in the United States with limited travel as needed.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 8+ years in DevOps, software engineering, or security engineering.
• Proficiency with CI/CD platforms and infrastructure as code tools.

Responsibilities

• Advise on security requirements within sprint planning and architecture reviews.
• Build and maintain centralized automated security testing in CI/CD (SAST/DAST, SCA).
• Manage cloud monitoring tools for vulnerability and configuration management; patching and hardening in engineering ops.
• Audit environments to ensure compliance with internal/external requirements and security standards.
• Implement and maintain cloud detection and response monitoring; act as incident responder (CIRT).

Skills

GitHub Actions

Terraform

Ansible

Go

JavaScript

Rust

Python

Cloud security

Kubernetes

IAM

GitOps

Incident response

Education

Bachelor's degree in CS/IT/Cybersecurity

Job description

The Luxor team has built a range of solutions for compute power, including a mining pool, custom firmware, an ASIC brokerage desk, Hashrate derivatives and compute to power CI and agents. We service clients across the globe. Our client base is growing rapidly and as such we are looking to expand our platform engineering team.We're looking for a Senior Platform Security Engineer with strong expertise in security and compliance. You'll join Luxor AI's Platform team and own the entire area of security and compliance within the team's scope, contributing to building and running production infrastructure. This role is ideal for someone who has experienced how security and compliance operate within a large organization and now seeks the autonomy to evolve that function at a fast-growing startup. It will suit an individual energized by the importance of the data we protect and the reliability we provide to our clients.This role will report directly to the Chief Technology Officer. This is a fully remote role based in U.S.A. with seldom travel if needed.

Responsibilities

• Serve as a day-to-day security advisor for the team you support, advocating security requirements as an engineering team member during sprint planning, architecture reviews, process discussions, product direction, design decisions, and while work is in flight
• Build and maintain centralized automated security testing and enforcement in CI/CD, including static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), secrets scanning, and infrastructure-as-code (IaC) scanning
• Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate ongoing patching and hardening into engineering operations
• Continually audit application environments and development processes to ensure compliance with internal and external requirements, and alignment with security standard methodologies
• Implement and maintain cloud detection and response monitoring, and act as an incident CIRT responder
• Document controls, configurations, and decisions to build durable institutional knowledge
• Enforce policies and detection using device management tooling (e.g. FleetMDM)

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience
• 8+ years of experience in DevOps, software engineering, or security engineering
• Proficiency with CI/CD platforms (e.g. GitHub Actions), infrastructure as code tools (e.g.,Terraform), and configuration management (e.g. Ansible)
• Proficiency in at least two of the following languages: Go, JavaScript, Rust, Python
• Hands-on cloud security experience in GCP, Alibaba, AWS, OVH, Hetzner and/or Azure, including identity and access management, containerization, network security controls, encryption, logging, and monitoring
• Harden access and controls (e.g. IAM Policy)
• Hands-on experience with Kubernetes GitOps (e.g. Flux, ArgoCD)
• Demonstrated experience implementing automated applica