Senior Platform Security Engineer

Saragossa; Dallas (TX); Hybrid; USD 207.000 - 253.000; Vollzeit

Zusammenfassung

Saragossa is seeking a Senior Platform Security Engineer to own the vulnerability management program across large-scale HPC and cloud environments. You will lead triage, threat modeling, and automation to improve security posture.

The role requires 6+ years in security/platform engineering, hands-on with common security tools, and coding in Python/Bash/Go. Hybrid work from Dallas, TX; sponsorship not provided.

Qualifikationen

• 6+ years of security/platform engineering experience.
• Hands-on with tools such as Qualys, Tenable, Wiz, Lacework or Prisma Cloud.
• Proficient in Linux and scripting (Python, Bash or Go).
• Experience integrating security into CI/CD and IaC (Terraform, Ansible).
• Strong understanding of CVSS, exploit maturity and risk-based prioritization.
• Knowledge of Falco, SBOMs or Sigstore is valued.
• Hybrid Dallas-based role; sponsorship not offered.

Aufgaben

• Own the vulnerability management program across the platform stack.
• Tune threat detection and lead vulnerability triage.
• Write automation to monitor security posture continuously.
• Integrate security scanning into CI/CD pipelines and IaC.
• Collaborate with Platform Engineering and DevOps teams.

Kenntnisse

Security engineering

Platform engineering

Kubernetes

OpenStack

AWS

Azure

Terraform

Ansible

Python

Go

Bash

CVSS

SBOMs

Sigstore

Falco

eBPF tooling

Tools

Qualys

Tenable

Wiz

Lacework

Prisma Cloud

Falco

eBPF tooling

Jobbeschreibung

Platform security isn’t about running scanners. It’s about knowing which vulnerabilities put you at risk.

We’re looking for a Senior Platform Security Engineer to help protect an organization running large-scale HPC and cloud environments. You’ll own the vulnerability management program across the platform stack, from bare-metal infrastructure and containers through to cloud services and the software supply chain.

This is a hands‑on role for someone who enjoys solving real security problems. You’ll tune threat detection so the alerts are worth acting on, lead vulnerability triage, run threat modeling and attack surface analysis, and write automation that keeps an eye on security posture around the clock. You’ll partner closely with Platform Engineering and DevOps to build security scanning into CI/CD pipelines and Infrastructure-as-Code workflows.

The environment spans Kubernetes, OpenStack, AWS and Azure.

This role needs someone who comes from a software background. You’ll have written production code and built infrastructure through code yourself, using tools like Terraform, Ansible or similar, so you understand how platform teams work because you’ve done the work.

On top of that, we’re looking for 6+ years in security engineering/platform engineering, hands‑on experience with tools like Qualys, Tenable, Wiz, Lacework or Prisma Cloud, and a solid grasp of CVSS, exploit maturity and risk‑based prioritization. You’ll be comfortable in Linux and scripting in Python, Bash or Go. Experience with Falco, eBPF tooling, SLSA, SBOMs or Sigstore would be highly valued.

The role is unable to offer work authorization sponsorship.

Base salary is up to $230,000 + bonus.

Based in Dallas, TX as a hybrid position.

No up-to-date CV required to start the conversation.