Senior Software Engineer – Platform Security & Automation

GTN Technical Staffing; Dallas (TX); Hybrid; USD 120,000 - 160,000; Full time

Job summary

GTN Technical Staffing seeks a hands-on Senior Software Engineer – Platform Security & Automation to build security tooling, automate vulnerability detection and remediation, and embed security into large-scale HPC/cloud environments.

You will develop event-driven integrations across security systems, strengthen vulnerability management across cloud/Linux/Kubernetes, and ensure secure CI/CD and IaC pipelines while collaborating with platform engineering and infra teams.

Qualifications

• Six or more years in software/security engineering or DevSecOps.
• Experience building internal tools, services, APIs, automation, or distributed systems.
• Hands-on vulnerability management and remediation at scale.
• Strong Linux and cloud infrastructure know-how.
• Experience with AWS and/or Azure and Kubernetes.

Responsibilities

• Design and build software and automation for vulnerability detection, remediation, reporting, and security posture management.
• Develop internal security tools, services, APIs, and integrations to improve visibility and accountability.
• Integrate security controls into CI/CD pipelines and IaC workflows.
• Support SBOM, signing, provenance, and supply chain security initiatives.
• Partner with Platform Engineering and DevOps on secure architecture and rollout.

Skills

6+ years experience

Internal tools & APIs

Vulnerability management

Linux & cloud infra

AWS/Azure experience

Kubernetes

CI/CD & IaC

APIs & event-driven

Vulnerability prioritization (CVSS)

Troubleshooting & communication

Security-focused software engineering

Security platforms & automation

Kubernetes security

Falco / eBPF

Software supply chain security

App & API security

Compliance experience

HPC/AI infra

IR collaboration / threat intel

Tools

Tenable

Qualys

Wiz

Prisma Cloud

CrowdStrike

Lacework

Falco

eBPF tooling

Sigstore

Job description

Senior Software Engineer – Platform Security & Automation

Work Arrangement: Hybrid

Employment Type: Direct Hire

Compensation: Competitive Base Salary + Bonus

Relocation: Relocation Package Available for Non-Local Candidates

Overview

Our client is seeking a hands‑on Senior Software Engineer – Platform Security & Automation to build software, automation, and security capabilities that protect the platforms, infrastructure, and software delivery systems supporting a large-scale HPC and cloud environment.

This role combines software engineering, platform security, vulnerability management, cloud security, and DevSecOps. You will build internal security tooling, automate vulnerability detection and remediation, improve real-time security visibility, and partner with engineering teams to embed security into how infrastructure and software are developed and operated.

The successful candidate will write production-quality code, integrate security platforms, and build scalable security solutions across complex cloud and infrastructure environments.

Key Responsibilities

Security Software & Automation

• Design and build software and automation for vulnerability detection, remediation, reporting, and security posture management.
• Develop internal security tools, services, APIs, and integrations that improve security visibility and engineering accountability.
• Build event‑driven and API‑based integrations across vulnerability, endpoint, cloud, and platform security systems.
• Use Python, Go, Java, Bash, or similar languages to automate security workflows at scale.
• Improve the reliability, scalability, and maintainability of security engineering platforms.

Vulnerability Management & Platform Security

• Build and mature vulnerability management capabilities across cloud, Linux, containers, Kubernetes, infrastructure, and software delivery environments.
• Identify, assess, prioritize, and drive remediation of vulnerabilities based on exploitability, asset criticality, and business impact.
• Develop scalable workflows for ownership, tracking, SLA management, and remediation.
• Perform security assessments, threat modeling, and attack‑surface analysis.
• Partner with engineering teams to reduce recurring security issues and improve secure‑by‑default configurations.

DevSecOps & Software Supply Chain

• Integrate security controls into CI/CD pipelines and Infrastructure‑as‑Code workflows.
• Implement automated scanning, policy enforcement, and security validation during build and deployment.
• Support dependency scanning, container image security, artifact integrity, and software supply chain protections.
• Improve Secure Software Development Lifecycle (SSDLC) practices while supporting efficient engineering workflows.
• Support Software Bill of Materials (SBOM), signing, provenance, and related supply chain security initiatives.
• Secure environments across AWS, Azure, Kubernetes, Linux, and containerized infrastructure.
• Support runtime security, secrets management, identity, secure configuration, and platform hardening.
• Improve security visibility across distributed production environments.
• Partner closely with Platform Engineering, DevOps, and infrastructure teams on secure architecture.

Detection, Incident Response & Reliability

• Build and tune security monitoring and detection capabilities across platform environments.
• Investigate security‑related production issues and support incident response, root‑cause analysis, and remediation.
• Improve signal quality and reduce unnecessary alert noise.
• Build reporting around security SLAs, remediation timelines, and platform risk.
• Use postmortems and incident findings to drive long‑term engineering improvements.

Required Qualifications

• 6+ years of experience in software engineering, security engineering, platform engineering, DevSecOps, application security, or related areas.
• Experience building internal tools, services, APIs, automation, or distributed systems.
• Hands‑on experience with vulnerability management and remediation at scale.
• Experience with tools such as Tenable, Qualys, Wiz, Prisma Cloud, CrowdStrike, Lacework, or similar platforms.
• Strong understanding of Linux, cloud infrastructure, containers, and modern platform environments.
• Experience with AWS and/or Azure.
• Familiarity with Kubernetes and containerized infrastructure.
• Experience integrating security controls into CI/CD pipelines and Infrastructure‑as‑Code workflows.
• Strong understanding of APIs, automation, and event‑driven architectures.
• Understanding of CVSS, exploitability, vulnerability prioritization, and risk‑based remediation.
• Strong troubleshooting, communication, and technical problem‑solving skills.

Preferred Qualifications

• Background as a software engineer or backend engineer with meaningful security engineering experience.
• Experience building security platforms or automation used across large engineering organizations.
• Experience with Kubernetes security and runtime detection.
• Familiarity with Falco, eBPF‑based security tooling, or similar technologies.
• Software supply chain security experience, including SLSA, SBOMs, artifact signing, and Sigstore.
• Application and API security experience.
• Experience supporting FedRAMP, SOC 2, PCI, or similar compliance environments.
• Background in HPC, AI infrastructure, cloud platforms, or large‑scale distributed systems.
• Experience working alongside incident response, detection engineering, threat intelligence, or SOC teams.

Ideal Candidate Profile

The ideal candidate is a software engineer with deep security expertise who is comfortable writing production‑quality code, building internal platforms and automation, integrating security tooling, and partnering directly with infrastructure and software engineering teams.

Strong candidates may come from backend engineering, platform engineering, security software engineering, DevSecOps, cloud security, or vulnerability engineering backgrounds, with demonstrated experience building security capabilities at scale.