Glocomms is partnered with a leading global HPC infrastructure company that delivers advanced computing platforms supporting scientific research, simulation, AI/ML, and engineering workloads. As the organization continues to expand its cloud and infrastructure capabilities, they are seeking a Senior Platform Security Engineer to drive critical security engineering initiatives across complex HPC, cloud, and platform environments. This individual will play a key role in strengthening the organization's security posture, reducing platform risk, and embedding security throughout the infrastructure and software delivery lifecycle.
Primary Responsibilities
- Design, implement, and continuously improve platform security controls across HPC, cloud, and bare-metal infrastructure environments.
- Own infrastructure vulnerability management activities, including vulnerability assessment, scanning, triage, prioritization, remediation, and reporting.
- Build and enhance real-time security monitoring, threat detection, runtime protection, and security visibility capabilities across engineering platforms.
- Partner closely with platform engineering, DevOps, infrastructure, and software development teams to integrate security into platform architecture and operational processes.
- Conduct threat modeling, attack surface analysis, security assessments, and risk assessments for critical systems and services.
- Drive cloud-native, container, and software supply chain security initiatives across Kubernetes, OpenStack, AWS, Azure, CI/CD pipelines, and Infrastructure-as-Code environments.
- Develop automation, detection engineering, and security tooling capabilities using Python, Bash, Go, and modern security platforms to improve resilience and operational efficiency.
Key Qualifications
- 5+ years of experience in Platform Security, Security Engineering, Infrastructure Security, Cloud Security, or a related discipline.
- Strong experience securing large-scale infrastructure, cloud platforms, HPC environments, or highly distributed engineering systems.
- Hands-on expertise with Kubernetes, OpenStack, AWS, Azure, Linux administration, container orchestration, and cloud-native technologies.
- Proven experience managing enterprise vulnerability management programs utilizing tools such as Qualys, Tenable, Wiz, Prisma Cloud, Lacework, or similar platforms.
- Deep understanding of infrastructure hardening, secure configuration management, container security, application security, and cloud security best practices.
- Experience building automation solutions and security tooling using Python, Bash, Go, or other modern scripting and development languages.
- Relevant certifications such as OSCP, GIAC, GPEN, GWAPT, GCSA, AWS Security Specialty, or equivalent security credentials are highly preferred.
This position is based in Dallas and follows a hybrid work model requiring employees to work onsite three days per week.