Platform Security Engineer - DevSecOps & Secure Delivery

ITHAKA; United States; Remote; USD 110,000 - 120,000; Full time

Job summary

ITHAKA is seeking a Platform Security Engineer to mature our DevOps into DevSecOps by embedding security into delivery, infrastructure, and workflows. You will partner with engineers and platform leaders to reduce risk through automation, standardization, and developer enablement.

The role emphasizes practical tooling, secure-by-default patterns, and collaboration across teams. The security function reports into Product Engineering and supports a distributed US workforce.

Qualifications

• 3-5 years of security engineering experience.
• Hands-on with security tooling and controls in modern software delivery.
• Experience with vulnerability management, dependency management, package governance, or software supply chain security.
• Familiarity with CI/CD, source control, infra automation, and cloud environments.
• Ability to write scripts/automation to improve security processes.
• Strong judgment balancing risk, developer experience, and delivery.
• Clear communication with engineers, architects and stakeholders.
• Ability to work independently and guide peers.
• Experience with AWS infrastructure and common engineering tooling is helpful.
• AI-enabled tooling experience is a plus but not required.

Responsibilities

• Build and improve engineering workflows and tooling for vulnerability management across applications, dependencies, containers, and infrastructure.
• Advocate for security checks and policy controls in pipelines and developer workflows.
• Improve dependency management and package governance for consistent security posture.
• Evaluate, implement, and tune SAST/DAST/SCA, secret scanning, and platform controls.
• Build automation to reduce manual remediation and speed secure delivery.
• Partner with teams to design secure-by-default patterns, templates, and guardrails.
• Triage findings, prioritize risks, and translate into remediation plans.
• Contribute to secure SDLC practices, docs, and guidance aligned with ITHAKA teams.
• Measure effectiveness of controls and propose improvements over time.

Job description

ITHAKA is seeking a Platform Security Engineer to mature our DevOps into DevSecOps by embedding security into delivery, infrastructure, and workflows. You will partner with engineers and platform leaders to reduce risk through automation, standardization, and developer enablement.

The role emphasizes practical tooling, secure-by-default patterns, and collaboration across teams. The security function reports into Product Engineering and supports a distributed US workforce.