Senior Platform Security Engineer (100% Remote within Poland)

Stack

Responsibilities

• ▹Develop and maintain tools for the Global Security team (vulnerability management platforms for application triaging and continuous compliance)
• ▹Ensure the platform is compliant with industry best practices and standards (ISO27001, C5, SOC2)
• ▹Help introduce security at every step of the platform lifecycle
• ▹Vigilantly understand and mitigate security threats before they arise
• ▹Optimize system scalability and cost efficiency
• ▹Develop, monitor and maintain Kubernetes clusters across several continents
• ▹CI/CD development and maintenance
• ▹Ensure all services are deployed in a highly available way
• ▹Fix urgent issues and optimize performance
• ▹Support other team members in their daily work
• ▹Collaborate with Global Security, PMS teams, the Core Team, Experience teams and Legal

Requirements

• ▹At least 5 years of security-related experience
• ▹Vast experience with container orchestration platforms like Kubernetes and how to secure them (must-have)
• ▹Know-how to maintain and develop policy for security-focused CNI/Service Mesh (e.g. Calico, Cilium)
• ▹Knowledge of scanning for and managing vulnerabilities at scale
• ▹Experience with HashiCorp Vault
• ▹Knowledge of why and how to use Terraform and popular CI/CD tools
• ▹Understanding of building scalable and secure production HA environments using AWS
• ▹Familiarity with network security services e.g. AWS WAF/Cloudflare
• ▹Comfortable developing tools or scripts in Bash or Go to automate work
• ▹Good communication skills

Soft skills

What we offer

• ▹100% remote-friendly culture, working from anywhere within Poland
• ▹Work in a diverse, global team making the healthcare experience more human

About the company

Docplanner Tech's Internal Platform team provides a reliable, scalable, self-service ecosystem supporting the entire software lifecycle. Platform Security, part of this 34-person team, is the first point of contact for Global Security and is responsible for the security of the underlying infrastructure.