8 months ago
Christchurch, New Zealand or Auckland, New ZealandSenior
Responsibilities
- Participate in on-call rotations, plan and test security incident response, lead post-incident reviews for security incidents, and build security event monitoring and alerting.
- Own security posture and compliance activities, including ISO 27001 and future SOC 2 audits, continuous compliance through Vanta, customer security questionnaires, and risk-register communication.
- Harden infrastructure through least-privilege access, PostgreSQL application roles, Kubernetes RBAC refinement, secret minimization, network segmentation, zero-trust controls, and read-only-by-default production access.
- Implement and operate vulnerability scanning with Trivy, Renovate, and Falco; lead vulnerability triage, coordinate remediation, and report metrics and trends.
- Partner with the SRE team to maintain platform reliability and security.
Requirements
- Preferred 5+ years of experience in security engineering, platform engineering, or SRE with a strong security focus.
- Hands-on Kubernetes security experience, including RBAC, network policies, and admission controllers.
- Experience with at least one of ISO 27001, SOC 2, or PCI-DSS compliance frameworks.
- Strong cloud security knowledge, with GCP experience preferred.
- Experience with Terraform, ArgoCD, and infrastructure-as-code workflows.
- Ability to communicate security risks to non-technical stakeholders and translate vulnerabilities into business risk.
- Experience with Cilium, Kyverno, Falco, container security, or software supply-chain security is a bonus.
- Rust or Go experience is a bonus.
Benefits
- Quarterly travel and accommodation to the nearest hub for one-week Season Openers if based outside a hub.
- Catered lunches, snacks, and drinks at Auckland, Christchurch, London, and San Francisco offices.
- Annual wellness allowance and family-focused benefits, including paid parental leave and flexible return-to-work arrangements.
- Paid 24/7 parking or a commuting allowance for office and coworking-space commuters.
- Office-first work arrangement with flexibility to manage schedules around personal needs.
- Social events including weekly happy hours, monthly lunches, quarterly Season Openers, and an annual global offsite.
- Relocation allowance for overseas or domestic moves to Partly HQ.
Categories
About Partly
Partly builds AI infrastructure for the automotive repair and parts industry, including a foundational model (Interpreter) that understands vehicle damage and the parts needed to fix it. Its platform and apps, including a product information management system, are used by suppliers, distributors, marketplaces, and repairers via APIs and software tools. Privately held and headquartered in Austin, Texas, it serves thousands of businesses across the global collision and repair supply chain, with teams in the US, UK, and New Zealand.