Senior/Staff Platform Security Engineer

About the Role

We are looking for a Senior or Staff-level Platform Security Engineer to work remotely. This position centers on a cloud-native healthcare and Software as a Medical Device (SaMD) ecosystem, necessitating an expert to oversee security within a sophisticated, high-assurance, and regulated landscape. You will take charge of designing, deploying, and verifying robust security measures across Kubernetes, Azure, and diverse production setups. Collaborating with Product, Engineering, Compliance, and IT departments is essential to maintain platform integrity. This role grants you considerable technical independence and ownership, requiring you to transform security data into clear development plans, perform architectural assessments, and spearhead responses to security incidents. You will engage with advanced cloud security tools while contributing to initiatives that require rigorous operational and security standards.

Requirements

• You need 6+ years of background in DevSecOps, infrastructure security, or cloud security, with a minimum of 4 years dedicated to application or platform security.
• You must demonstrate practical experience with Azure security tools such as Defender for Cloud, Key Vault, RBAC, and Entra ID.
• You must have proven capability in managing Kubernetes and AKS security, specifically regarding network policies and workload identity.
• You need proficiency in secure SDLC practices like SCA, DAST, SAST, and container analysis, plus strong experience with IaC frameworks like Bicep or Terraform.
• You must be a practitioner who can provide evidence of personally configuring and verifying security controls.
• You require excellent communication abilities to clearly articulate security findings to engineering stakeholders and ensure issues are resolved.
• Experience with HIPAA, ISO 27001, or SOC 2 compliance is highly desired.
• Knowledge of security platforms such as CrowdStrike or Microsoft Sentinel, and coding skills in PowerShell, Go, or Python are considered assets.

Responsibilities

• You will deploy and audit security measures across the full technology stack, covering identity governance, cloud networking, and CI/CD pipelines.
• You will prioritize securing container and software supply chains by verifying image origin, executing vulnerability scans, and enforcing secure deployment protocols.
• You will maintain network integrity by employing WAFs, firewalls, and zero-trust strategies to minimize exposure.
• You will oversee threat detection and incident response operations by utilizing cloud audit logs and SIEM data to identify and neutralize risks.
• You will execute detailed architecture reviews and threat modeling sessions to help establish the long-term technical security strategy.
• You will promote security automation by deploying infrastructure-as-code policies.
• You will partner with IT and engineering teams to interpret technical security results into actionable fixes and promote a security-conscious mindset across the development process.

Benefits & Perks

• This position is fully remote and available to candidates based in the Philippines.
• You will receive significant technical autonomy and own high-impact projects.
• You will have direct exposure and the ability to work closely with your peers.
• You will gain experience working on sophisticated cloud-native SaMD and healthcare platforms in a regulated environment using current Azure and AKS security technologies.