Remote Lead Platform Security Engineer (AWS/Kubernetes)

blockchaincapital.com; San Francisco (CA); On-site; USD 180,000 - 220,000; Full time

Benefits offered by this job

Competitive salary and equity

Performance bonus

Comprehensive medical, dental, and vis

Remote work stipend

Flexible hours

Unlimited vacation

401(k)

Wellness benefit

Weekly meal benefit

Global off-sites

Job summary

Phantom is hiring a Senior Platform Security Engineer to own security across AWS and Kubernetes environments. You will work with infrastructure and engineering teams to secure control planes, identities, workloads, and deployment systems behind our core products.

This role emphasizes hands-on coding, incident response, and building automated security controls. We operate fully remote and welcome candidates based in the US or Canada.

Qualifications

• 7+ years in platform/security or related role.
• Deep hands-on AWS security experience with IAM, networking, and secrets management.
• Production Kubernetes security experience, preferably EKS, with RBAC and pod security.

Responsibilities

• Own and improve security across Phantom's AWS environment.
• Secure production Kubernetes environments (EKS) and workload identity.
• Design least-privilege access models for engineers and automation.
• Protect mission-critical systems and infrastructure.
• Lead security design for new infrastructure and platform services.
• Build policy-as-code controls and automation.
• Harden CI/CD and software supply chains (GitHub Actions, runners).
• Develop AI-assisted security workflows to improve response speed.
• Collaborate with Infrastructure, SRE, and engineering teams.

Skills

AWS security

Kubernetes security

Identity & access

CI/CD security

Policy as code

Python/Go/Rust

Tools

Pulumi

Terraform

Kubernetes policy engines

GitHub Actions

Job description

Phantom is hiring a Senior Platform Security Engineer to own security across AWS and Kubernetes environments. You will work with infrastructure and engineering teams to secure control planes, identities, workloads, and deployment systems behind our core products.

This role emphasizes hands-on coding, incident response, and building automated security controls. We operate fully remote and welcome candidates based in the US or Canada.