Software Engineer – Platform Security
FriendliAI3 hours ago
Responsibilities
- Design and implement security architecture for a Kubernetes-based, multi-tenant serverless platform.
- Build guardrails as code using Terraform and Helm.
- Establish network segmentation and service-mesh policy.
- Develop secrets and key-management patterns.
- Implement runtime detections for containerized workloads.
- Design and roll out IAM and workload identity management.
- Threat model platform features and changes.
- Debug production issues, lead post-incident hardening, and automate evidence for compliance controls.
- Collaborate with Platform, SRE, Infrastructure, and engineering teams to deliver a secure-by-default developer experience.
Requirements
- 5+ years of experience securing cloud-native platforms, with a focus on distributed systems and multi-tenancy.
- Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent.
- Strong hands-on experience with AWS, including IAM, VPC/networking, and logging/monitoring, plus Kubernetes and container security.
- Proficiency with Terraform and Helm.
- Experience building or operating runtime detections for containers or functions.
- Strong technical background in backend systems, cloud infrastructure, or AI tooling.
- Clear written and verbal communication skills and the ability to translate pricing or business rules into robust systems.
- Preferred experience with Knative or similar serverless-on-Kubernetes frameworks, container hardening and sandboxing, policy-as-code, admission policy design, eBPF, multi-cloud identity, and SOC 2/HIPAA control automation.
Benefits
- Competitive compensation and benefits package.
- Daily lunch and dinner provided, with unlimited snacks and beverages.
- Health check-up and top-tier hardware support.
- Flexible working hours and a highly collaborative environment.