Software Engineer – Platform Security
FriendliAI4 days ago
Seoul, Korea, SouthSenior
Responsibilities
- Design and implement security architecture for a Kubernetes-based, multi-tenant serverless platform.
- Build guardrails as code using Terraform and Helm.
- Establish network segmentation and service-mesh policy.
- Develop secrets and key management patterns.
- Implement runtime detections for containerized workloads.
- Design and roll out IAM and workload identity management.
- Threat model platform features and changes.
- Debug production issues, lead post-incident hardening, and automate evidence for compliance controls.
- Collaborate with Platform, SRE, Infrastructure, and other engineering teams.
Requirements
- At least 5 years of experience securing cloud-native platforms, distributed systems, and multi-tenant environments.
- Bachelor’s or Master's degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent experience.
- Strong hands-on experience with AWS, including IAM, VPC/networking, and logging/monitoring.
- Strong experience with Kubernetes and container security.
- Proficiency with Terraform and Helm.
- Experience building or operating runtime detections for containers or functions.
- Strong technical background in backend systems, cloud infrastructure, or AI tooling.
- Clear written and verbal communication skills and the ability to translate pricing and business rules into robust systems.
- Preferred experience with Knative or similar serverless-on-Kubernetes frameworks, container hardening and sandboxing, policy-as-code, admission policy design, eBPF-based observability and detections, multi-cloud identity, and SOC 2/HIPAA control automation.
Benefits
- Flexible working hours.
- Daily lunch and dinner, plus unlimited snacks and beverages.
- Supportive and highly collaborative work environment.
- Health check-up support and top-tier equipment/hardware support.
- Competitive compensation, startup equity, and health insurance.
- Work arrangement and location are not otherwise specified.