SecOps / Platform Security Engineer

As a SecOps / Platform Security Engineer, you will play a crucial role in leading the security architecture and compliance initiatives for our AWS-based infrastructure. Your responsibilities will focus on cloud security, compliance implementation, and secure platform architecture to ensure that our infrastructure meets enterprise-grade security standards. You will collaborate closely with the engineering team to implement robust security controls, manage access policies, and establish a compliant and resilient production environment. Key Responsibilities: - Lead the implementation of security frameworks such as PCI DSS, SOC2, or ISO 27001 - Design and enforce secure cloud architecture and network isolation - Implement and maintain encryption standards across infrastructure and services - Define and manage IAM policies, access controls, and least-privilege security models - Conduct security audits, vulnerability assessments, and remediation planning Cloud Security Operations: - Monitor infrastructure for security threats, anomalies, and vulnerabilities - Implement security monitoring, logging, and incident response workflows - Strengthen application and infrastructure security across the AWS ecosystem Infrastructure as Code & Platform Security: - Manage AWS infrastructure using Infrastructure as Code (SST, CDK, Pulumi, Terraform) - Ensure infrastructure deployments follow secure-by-design principles - Integrate security practices into CI/CD pipelines Platform Stability & Reliability: - Support scalable backend infrastructure handling high-volume financial transactions - Improve system resilience, availability, and security posture Security Leadership: - Act as the Security Champion for the engineering team - Guide developers on secure coding practices and cloud security best practices Qualifications Required: - 5+ years of experience in SecOps, Cloud Security, or Security-focused DevOps roles - Strong experience with AWS security architecture and services - Hands-on experience implementing security compliance frameworks (PCI DSS / SOC2 / ISO 27001) - Experience designing secure IAM policies, network isolation, and encryption standards - Strong experience with Infrastructure as Code (SST, CDK, Terraform, Pulumi) - Experience securing production systems handling financial or high-traffic workloads - Strong written and verbal communication skills for remote collaboration Tech Environment: Cloud: AWS Languages: TypeScript, Node.js Infrastructure: SST / AWS CDK / Terraform / Pulumi Databases: PostgreSQL, DynamoDB, MongoDB Frameworks: NestJS, Next.js As a SecOps / Platform Security Engineer, you will play a crucial role in leading the security architecture and compliance initiatives for our AWS-based infrastructure. Your responsibilities will focus on cloud security, compliance implementation, and secure platform architecture to ensure that our infrastructure meets enterprise-grade security standards. You will collaborate closely with the engineering team to implement robust security controls, manage access policies, and establish a compliant and resilient production environment. Key Responsibilities: - Lead the implementation of security frameworks such as PCI DSS, SOC2, or ISO 27001 - Design and enforce secure cloud architecture and network isolation - Implement and maintain encryption standards across infrastructure and services - Define and manage IAM policies, access controls, and least-privilege security models - Conduct security audits, vulnerability assessments, and remediation planning Cloud Security Operations: - Monitor infrastructure for security threats, anomalies, and vulnerabilities - Implement security monitoring, logging, and incident response workflows - Strengthen application and infrastructure security across the AWS ecosystem Infrastructure as Code & Platform Security: - Manage AWS infrastructure using Infrastructure as Code (SST, CDK, Pulumi, Terraform) - Ensure infrastructure deployments follow secure-by-design principles - Integrate security practices into CI/CD pipelines Platform Stability & Reliability: - Support scalable backend infrastructure handling high-volume financial transactions - Improve system resilience, availability, and security posture Security Leadership: - Act as the Security Champion for the engineering team - Guide developers on secure coding practices and cloud security best practices Qualifications Required: - 5+ years of experience in SecOps, Cloud Security, or Security-focused DevOps roles - Strong experience with AWS security architecture and services - Hands-on experience implementing security compliance frameworks (PCI DSS / SOC2 / ISO 27001) - Experience designing secure IAM policies, network isolation, and encryption standards - Strong experience with Infrastructure as Code (SST, CDK, Terraform, Pulumi) - Experience securing production systems handling financial or high-traffic workloads - Strong written and verbal communication skills