Security Platform Engineer

Lumin Digital, Inc.; United States; Remote; USD 135,000 - 160,000; Full time

Job summary

Lumin Digital, Inc. is seeking a Security Platform Engineer to join the Security Engineering team. The successful candidate will design and operate security infrastructure to protect Lumin’s cloud-native platform, ensuring security best practices are embedded into all engineering processes. This role encompasses responsibilities from building security solutions to participating in an on-call rotation, requiring a mixture of technical expertise and strong communication skills. Candidates should have relevant experience in cloud infrastructure and security disciplines, along with a commitment to improving security posture across the organization.

Qualifications

• 3 years of relevant experience in cloud infrastructure or security engineering.
• 2 years designing and operating cloud-native services, preferably AWS.
• Strong communication and documentation skills.

Responsibilities

• Build and maintain infrastructure for security-focused telemetry and observability.
• Develop and maintain CI/CD pipeline integrations that automatically scan for vulnerabilities.
• Collaborate with engineering teams to embed security into system architecture.

Skills

Cloud security best practices

CI/CD automation

Kubernetes

Terraform

Scripting (Python, Bash)

Education

Associate degree in Computer Science, Information Security, or related field

Tools

OpenSearch

Infrastructure-as-code tools

Job description

The Security Platform Engineer is a member of the Security Engineering team focused on building and operating infrastructure to support the detection, analysis, and mitigation of security threats across Lumin Digital’s cloud-native platform. This role blends principles of site reliability engineering with a strong security mindset — designing specialized security systems that are resilient, observable, and defensible at scale.

Security Platform Engineers contribute to our platform’s integrity by designing, deploying, and maintaining security solutions, including telemetry pipelines, CI/CD workflows, and secure-by-default patterns for teams to build upon.

Essential Functions

Build and maintain infrastructure for security-focused telemetry and observability, including logging clusters, ingest pipelines, and alerting tools that enable effective detection and response capabilities.

Develop and maintain CI/CD pipeline integrations that automatically scan for vulnerabilities, enforce policy guardrails, and promote secure artifact handling across environments.

Use infrastructure-as-code tools (e.g., Terraform) to codify cloud environments and security services, enforcing consistency, auditability, and separation of duties.

Secure Kubernetes workloads by configuring RBAC, network policies, and deployment safeguards to reduce lateral movement and minimize blast radius.

Participate in an on-call rotation for security-related services, triaging incidents and contributing to post-incident reviews and durable improvements to runbooks and monitoring.

Implement and continuously improve index management, performance tuning, and role-based access controls for logging environments supporting security use cases.

Design and advocate for secure cross-account and multi-region infrastructure patterns, including the use of KMS, IAM roles, and VPC configurations to protect sensitive data in motion and at rest.

Collaborate with platform and product engineering teams to embed security into system architecture, deployment processes, and operational practices from the start.

Support internal security audits and incident response activities by maintaining logs, ensuring data fidelity, and automating evidence collection where feasible.

Position Specifications

Education:

Associate degree in Computer Science, Information Security, or related field; or equivalent self-directed study with demonstrated competency in security operations, cloud engineering, or platform reliability required.

Experience:

Three (3) years of relevant experience in cloud infrastructure, platform engineering, or security engineering.

Two (2) years of experience designing and operating cloud-native services (preferably AWS), including experience with CI/CD automation, monitoring, and infrastructure-as-code.

Experience with Kubernetes, Terraform, Git-based workflows, OpenSearch (or similar platforms), and scripting (e.g., Python or Bash) required.

Knowledge, Skills, and Abilities:

Working knowledge of cloud security best practices, including the requirements and guidance from security and compliance frameworks, such as SOC 2 Trust Services Criteria, PCI Data Security Standard, the CIS Benchmarks, and the AWS Well-Architected Framework.

Technical proficiency with cloud security principles, including IAM, encryption, network segmentation, and secure telemetry collection.

Familiarity with operational practices such as capacity planning, SLO development, and incident management.

Demonstrated ability to build and support complex distributed systems using automation and configuration management.

Calm under pressure, with the ability to triage incidents and collaborate across technical and non-technical stakeholders.

Strong communication and documentation skills; able to teach and influence secure engineering practices across teams.

Ability to work independently and remotely while maintaining high levels of productivity and collaboration.

Must be able to pass requisite background checks to access sensitive information.

$135,000 - $160,000 a year

LIFE AT LUMIN DIGITAL

Lumin Digital is a trailblazer in digital banking solutions, driven by a unique approach to technology, service, and people. We empower credit unions and banks by creating cutting-edge digital experiences that continuously serve, engage, and grow their membership base. Lumin is 100% cloud-native, purpose-built to unlock the full advantages of the cloud for financial institutions and their users.

At Lumin, we thrive on curiosity and innovation. Our culture fosters trust - in our expertise and decisions, respect - for diverse perspectives and talents, and boldness - in pursuing innovative paths. These values guide us, shaping a workplace where collaboration thrives, ideas flourish, and new possibilities are discovered. Focused on continuous improvement and innovation, we encourage our team to explore, experiment, and put new ideas into action, challenging the usual way of doing things.

All qualified applicants, including those with arrest or conviction records, will be considered for employment. Any conditional offer will include a notice regarding the review of the candidate’s criminal history as part of the hiring process.

For more information, visit lumindigital.com.