Platform Security Engineer — AWS & Kubernetes with AI-Driven Defense

phantom; United States; Remote; USD 200,000 - 250,000; Full time

Benefits offered by this job

Competitive salary

Equity

Bonus program

Medical, dental, and vision insurance

Remote setup stipend

Flexible hours

Unlimited vacation

401(k)

Wellness benefit

Global off-sites

Job summary

Phantom is hiring a Senior Platform Security Engineer focused on securing a multi-account AWS environment and production Kubernetes workloads. You will design least-privilege access, protect mission-critical infrastructure, and lead security across CI/CD and supply chains.

The role requires hands-on experience with Pulumi, Terraform, GitHub Actions, and IaC; you will build automated controls and AI-assisted workflows to improve security coverage and remediation speed while collaborating with

Qualifications

• 7+ years of experience in platform security, cloud security, infrastructure security, security engineering, or a closely related engineering role.
• Deep, hands-on experience securing production AWS environments with IAM, workload identity, network security, and secrets management.
• Deep experience securing Kubernetes in production, preferably EKS, including RBAC, identity, policy, and cluster hardening.
• Experience designing or securing mission-critical systems with high availability and strong privilege controls.
• Understanding of identity, authorization, least privilege, and blast-radius reduction across human and machine access.
• Experience securing CI/CD and software supply chains, including GitHub Actions and build runners.
• Infrastructure as code with Pulumi, Terraform, CloudFormation, or similar tools.
• Ability to write production-quality code or automation in TypeScript, Python, Go, or Rust.
• High agency and ownership to take problems from investigation to remediation.
• Strong communication and collaboration with infrastructure and engineering teams.

Responsibilities

• Own and improve security across Phantom's multi-account AWS environment, including IAM and guardrails.
• Secure production Kubernetes environments on EKS, including RBAC, workload identity, admission controls, and network boundaries.
• Design least-privilege access models for engineers and automation with auditable paths.
• Protect infrastructure supporting mission-critical products and services.
• Lead security design for new infrastructure and major architectural changes.
• Build reusable security controls with Pulumi, Terraform, policy engines, and automated validation.
• Harden CI/CD and supply chain security including GitHub Actions and artifact signing.
• Develop security automation tooling and AI-assisted workflows to improve coverage and response speed.
• Partner with Infrastructure, SRE, and product engineering to set practical platform-security standards.

Skills

AWS Security

Kubernetes Security

Identity & Access

CI/CD Security

Security Automation

Cross-Functional Leadership

Tools

Pulumi

Terraform

CloudFormation

GitHub Actions

TypeScript

Python

Go

Rust

Job description

Phantom is hiring a Senior Platform Security Engineer focused on securing a multi-account AWS environment and production Kubernetes workloads. You will design least-privilege access, protect mission-critical infrastructure, and lead security across CI/CD and supply chains.

The role requires hands-on experience with Pulumi, Terraform, GitHub Actions, and IaC; you will build automated controls and AI-assisted workflows to improve security coverage and remediation speed while collaborating with