Platform Security Engineer: DevSecOps & Secure Automation

ITHAKA; New York (NY); On-site; USD 110,000 - 120,000; Full time

Job summary

ITHAKA, a nonprofit organization known for JSTOR, Portico, and Ithaka S+R, seeks a Platform Security Engineer to mature DevSecOps by embedding security into software delivery, infrastructure, and developer workflows. You’ll automate security tooling, reduce manual remediation, and promote secure-by-default patterns across engineering teams.

The role reports to the Associate Director, Product Engineering and collaborates with the Chief Architect to align with enterprise security strategy.

Qualifications

• 3-5 years of experience in security engineering, platform engineering, DevSecOps, or a closely related technical role.
• Hands-on experience implementing security tooling and controls in modern software delivery environments.
• Experience with vulnerability management, dependency management, package governance, or software supply chain security.
• Familiarity with CI/CD, source control workflows, infrastructure automation, and cloud-based application environments.
• Ability to write scripts or automation to improve security processes and reduce manual effort.

Responsibilities

• Build and improve engineering workflows and tooling for vulnerability management across applications, dependencies, containers, and infrastructure.
• Advocate for integration of security checks and policy controls into software delivery pipelines and day-to-day developer workflows.
• Improve dependency management and package governance so teams can address software exposure consistently and sustainably.
• Help evaluate, implement, and tune security tooling including SAST, DAST, SCA, secret scanning, and related platform controls.
• Build automation that reduces repetitive manual remediation work and speeds up secure delivery.
• Partner with engineering teams to design and promote secure-by-default patterns, templates, and guardrails.
• Work with engineers and technical leaders to triage findings, prioritize risks, and translate them into practical remediation plans.
• Contribute to secure software development lifecycle practices, documentation, and internal guidance align with how ITHAKA teams build and operate systems.
• Measure the effectiveness and adoption of security controls and recommend practical improvements over time.

Skills

DevSecOps

Security tooling

CI/CD

Vulnerability mgmt

AWS

Automation

Communication

Job description

ITHAKA, a nonprofit organization known for JSTOR, Portico, and Ithaka S+R, seeks a Platform Security Engineer to mature DevSecOps by embedding security into software delivery, infrastructure, and developer workflows. You’ll automate security tooling, reduce manual remediation, and promote secure-by-default patterns across engineering teams.

The role reports to the Associate Director, Product Engineering and collaborates with the Chief Architect to align with enterprise security strategy.