Senior Platform Security Engineer (Cloud & SIEM)

outset; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Outset is hiring a Platform Security Engineer to harden security across our AWS infrastructure and product codebase. You will partner with engineering to embed secure design, perform threat modeling, and lead incident investigations during security events.

The role spans application, cloud, and infrastructure security, with emphasis on detection engineering, logging improvements, and practical controls that scale with rapid product development.

Qualifications

• Hands-on experience in application security, cloud security, infrastructure security, or security-focused SRE.
• Experience securing production systems in AWS, including identity, networking, logging, data protection, and attack paths.
• Strong working knowledge of Terraform and infrastructure-as-code security practices.
• Ability to assess security across both infrastructure and application layers.
• Experience reviewing architecture or code for security vulnerabilities.
• Familiarity with API security and data security risks.
• Experience investigating complex events using logs and telemetry.
• Experience writing or tuning SIEM detection rules.

Responsibilities

• Identify, assess, and help remediate security risks across our AWS infrastructure, Terraform code, application architecture, and product code.
• Partner with engineering teams to design secure systems and incorporate security into normal development and operational workflows.
• Participate in security reviews of RFC and PRR documentation, providing clear, actionable feedback on architecture, data flows, access controls, abuse cases, and technical risk.
• Review application and infrastructure changes where additional security scrutiny is warranted.
• Participate in external penetration tests, including preparation, technical coordination, analysis of findings, remediation planning, and validation of fixes.
• Help improve the effectiveness and repeatability of the penetration-testing program, with the opportunity to assume ownership of the program over time.
• Serve as the lead platform investigator during security and privacy incidents, working within the incident-response process led by the Head of Security.
• Analyze application, cloud, identity, network, audit, and infrastructure telemetry to determine the scope, impact, and root cause of incidents.
• Translate investigation findings into containment actions, durable remediations, improved detections, and clear technical documentation.
• Contribute to the design, implementation, tuning, and maintenance of SIEM detection rules that monitor our platform.
• Investigate and respond to alerts involving AWS infrastructure, application behavior, access patterns, data movement, and other platform activity.
• Improve logging and telemetry where existing data is insufficient to detect threats or investigate incidents.
• Develop security tooling and automation that help engineers identify and address vulnerabilities earlier.
• Partner with SRE and engineering teams on cloud configuration, identity and access management, secrets management, vulnerability management, and infrastructure hardening.
• Help establish practical security standards that reduce risk without unnecessarily slowing product development.

Skills

Cloud security

Application security

Incident response

Security architecture

Terraform IaC

SIEM

Threat detection

SRE collaboration

Python scripting

Tools

Terraform

SIEM

AWS

CloudWatch

IDS/IPS

Job description

Outset is hiring a Platform Security Engineer to harden security across our AWS infrastructure and product codebase. You will partner with engineering to embed secure design, perform threat modeling, and lead incident investigations during security events.

The role spans application, cloud, and infrastructure security, with emphasis on detection engineering, logging improvements, and practical controls that scale with rapid product development.