Hybrid Senior Platform Security Engineer

at Multiverse

• Job title: Senior Platform Security Engineer
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Azure, Cloud, Node.js, Python, Terraform, TypeScript
• Location requirements: Hybrid, London, United Kingdom

About the role

• Senior Platform Security Engineer to own and integrate security in the platform team's operations. Collaborating with central InfoSec team to implement effective security solutions.

Responsibilities

• Architect Secure Foundations: You help the platform team to own the security of our developer platform. This includes designing, building, and maintaining security controls and services within our CI/CD pipelines.
• Secure Our Infrastructure as Code (IaC): Partner with your Platform teammates to be the subject matter expert for securing our Terraform modules and cloud environments (AWS, Azure). You'll focus on preventing misconfigurations before they're deployed.
• Incident Response and Operations: Participate in the team's on-call rotation, including out-of-hours coverage to support platform availability and security. You will assist in troubleshooting critical issues, lead the response for security-specific incidents.
• Build a Secure "Paved Road": Seamlessly integrate and orchestrate security testing (SAST, DAST, SCA, container scanning) into developer workflows.
• Enable Vulnerability Remediation: Develop tools and processes to help engineering teams triage, prioritise, and remediate vulnerabilities.

Requirements

• A "Builder" Mindset: You have strong coding and scripting skills (e.g., Python, TypeScript/Node) and a passion for automating *everything*.
• Cloud & Infrastructure Experience: You have experience building and securing modern cloud-native infrastructure, including CI/CD pipelines (like GitHub Actions), cloud environments (AWS/Azure), and Infrastructure as Code (like Terraform).
• Application Security Knowledge: You have a solid understanding of the AppSec landscape and practical experience integrating tools (SAST, DAST, SCA) into developer workflows.
• A Collaborative Partner: You have excellent communication skills. You enjoy collaborating with engineering teams and translating complex security concepts into clear guidance.
• Observability-Driven: You have experience using security and monitoring platforms (like Datadog) to detect and respond to threats.

Benefits

• 27 days holiday, plus 5 additional days off: 1 life event day, 2 volunteer days, 2 company-wide wellbeing days (M-Powered Weekend) and 8 bank holidays per year
• private medical Insurance with Bupa, a medical cashback scheme, life insurance, gym membership & wellness resources through Wellhub and access to Spill - all in one mental health support
• we collaborate in the office 3 days per week
• you'll have the opportunity to work from anywhere, up to 10 days per year
• weekly socials, company wide events and office snacks!