Platform Security Engineer — Hybrid Cloud & Automation

NJF Global Holdings Ltd; New York (NY); On-site; USD 180,000 - 260,000; Full time

Job summary

NJF Global Holdings Ltd in New York is seeking a Staff Security Engineer to join its Platform Security team. You will design secure hybrid infrastructures across cloud and on-prem environments, focusing on automation and risk management.

The role involves building security architectures, threat modelling, CI/CD security, and working with containers, Kubernetes, IAM and workload security, with hands-on coding in Python/Go/PowerShell.

Qualifications

• Proficient in Python/Go/PowerShell or similar scripting languages.
• Experience with threat modelling and software supply chain security.
• Hands-on security engineering across cloud and on-prem environments.

Responsibilities

• Designing and building secure platforms across cloud and on-prem environments.
• Developing security architectures, isolation patterns, trust boundaries and guardrails.
• Assessing new technologies and turning security risks into practical engineering controls.
• Working across networking, IAM, privileged access, containers, Kubernetes and workload security.
• Automating security controls using Terraform, policy-as-code, APIs and software engineering.
• Applying AI/LLM tooling and emerging technologies to improve security automation.
• Carrying out threat modelling and risk assessments across infrastructure, cloud and software.
• Collaborating with Infrastructure, Engineering, Research and other teams to deliver secure solutions.

Skills

Python

Go

PowerShell

Threat modelling

CI/CD

Supply-chain security

Tools

Terraform

Kubernetes

AWS

Job description

NJF Global Holdings Ltd in New York is seeking a Staff Security Engineer to join its Platform Security team. You will design secure hybrid infrastructures across cloud and on-prem environments, focusing on automation and risk management.

The role involves building security architectures, threat modelling, CI/CD security, and working with containers, Kubernetes, IAM and workload security, with hands-on coding in Python/Go/PowerShell.