Platform Security Engineer (AMER/EMEA)

Supabase; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Fully Remote

ESOP

Tech Allowance

Health Benefits

Annual Off-Sites

Flexible Work

Professional Development

Job summary

Supabase is seeking a Platform Security Engineer to strengthen security across our cloud platform, AWS, Kubernetes and containers. You’ll work with infrastructure, platform, SRE and leadership to reduce risk and implement scalable guardrails while keeping development velocity.

You’ll focus on securing developer infrastructure, building secure defaults, and leading risk assessments in large cloud environments to protect our growing platform and users.

Qualifications

• Senior level experience in platform security, cloud security, or security engineering.
• Deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals.
• Experience in large cloud environments and multi‑cluster Kubernetes setups.
• Ability to communicate clearly across technical and non‑technical audiences.

Responsibilities

• Identify and reduce security risk across AWS, Kubernetes, containerized workloads and platform infrastructure.
• Conduct threat modeling, architecture reviews and risk assessments for platform systems.
• Partner with infrastructure, platform and SRE teams to design secure-by-default patterns.
• Improve Kubernetes and container security including workload isolation, RBAC and runtime hardening.
• Assess container runtime and Linux isolation risks and related security controls.
• Strengthen AWS security posture across IAM, network controls, logging and encryption.
• Build scalable guardrails, automation and secure defaults.
• Prioritize security efforts by distinguishing real platform risk from theoretical risk.

Skills

Platform security

Cloud security

Infrastructure security

Container security

Security engineering

AWS

Kubernetes

Linux security

Job description

About Supabase

Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth.

Start in minutes with a fully managed, scalable Postgres database and a suite of tools that eliminate the complexity of backend development. Use one or use all—Supabase gives teams the flexibility of open source with the speed and simplicity of a modern platform, so they can move fast without sacrificing control.

What Are We Looking For

We’re looking for a Platform Security Engineer to join our team and help strengthen the security of Supabase’s infrastructure, cloud platform, Kubernetes environments, and containerized workloads as we continue to scale. You’ll work closely with infrastructure, platform, SRE, product engineering, and technical leadership , helping us proactively reduce risk across the systems that run Supabase.

This role is ideal for someone who has deep hands-on experience with AWS, Kubernetes, containers, Linux, and large cloud environments and is excited about securing developer infrastructure without slowing teams down. Success in this role means improving the security posture of the platform through pragmatic engineering, clear technical judgment, and scalable guardrails.

What You’ll Be Responsible for

In this role, you’ll:

• Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure.




• Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems.




• Partner closely with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns.




• Improve Kubernetes and container security across areas like workload isolation, RBAC, admission control, secrets, network policy, and runtime hardening.




• Assess container runtime and Linux isolation risks, including capabilities, seccomp/AppArmor, namespaces, cgroups, and container escape scenarios.




• Strengthen AWS security posture across IAM, account boundaries, network controls, logging, detection, encryption, and service configuration.




• Build scalable mechanisms such as automation, guardrails, paved paths, detection, secure defaults, and review frameworks.




• Distinguish between theoretical risk and material platform risk to prioritize security efforts effectively.

You Might Be a Good Fit If You

• Have senior-level experience in platform security, cloud security, infrastructure security, container security, or security engineering.




• Have deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals.




• Have worked in large cloud environments , multi-cluster Kubernetes setups, developer platforms, SaaS platforms, or high-scale infrastructure teams.




• Can reason clearly about identity, networking, workload isolation, runtime security, secrets, supply chain, and blast radius.




• Communicate clearly across both technical and non-technical audiences, especially in a written, asynchronous environment.




• Are able to manage security efforts across complex projects with various stakeholders




• Are energized by solving real-world infrastructure security problems and navigating ambiguity while moving quickly.




• Prefer building guardrails, automation, and secure defaults over creating unnecessary process or bottlenecks.

What We Offer

• Fully Remote




• ESOP




• Tech Allowance




• Health Benefits




• Annual Off-Sites




• Flexible Work




• Professional Development

About the Team

Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love.

• ~400 team members




• 60+ countries




• 20+ languages spoken




• Over $1B raised (including our $500M Series F)




• 540,000+ community members

We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.