Luxor Senior Platform Security Engineer at Luxor responsible for security and compliance within the platform engineering team. Own security advisory, automated security testing, cloud monitoring, compliance auditing, and incident response.
Responsibilities
Serve as a day-to-day security advisor for the team you support, advocating security requirements as an engineering team member during sprint planning, architecture reviews, process discussions, product direction, design decisions, and while work is in flight
Build and maintain centralized automated security testing and enforcement in CI/CD, including static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), secrets scanning, and infrastructure-as-code (IaC) scanning
Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate ongoing patching and hardening into engineering operations
Continually audit application environments and development processes to ensure compliance with internal and external requirements, and alignment with security standard methodologies
Implement and maintain cloud detection and response monitoring, and act as an incident CIRT responder
Document controls, configurations, and decisions to build durable institutional knowledge
Enforce policies and detection using device management tooling (e.g. FleetMDM)
Qualification
Bachelor's degree in Computer Science8+ years of experience in DevOpsProficiency with CI/CD platforms (eHarden access and controls (eStrong scripting skills in Python
Required
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience
8+ years of experience in DevOps, software engineering, or security engineering
Proficiency with CI/CD platforms (e.g. GitHub Actions), infrastructure as code tools (e.g.,Terraform), and configuration management (e.g. Ansible)
Proficiency in at least two of the following languages: Go, JavaScript, Rust, Python
Hands-on cloud security experience in GCP, Alibaba, AWS, OVH, Hetzner and/or Azure, including identity and access management, containerization, network security controls, encryption, logging, and monitoring
Harden access and controls (e.g. IAM Policy)
Hands-on experience with Kubernetes GitOps (e.g. Flux, ArgoCD)
Demonstrated experience implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement
Familiarity with penetration testing applications or experience conducting penetration testing engagements
Strong scripting skills in Python, or Bash for automation and integration
Experience supporting third-party attestations and audits (e.g., SOC 2 Type 2, ISO 27001), including preparation, implementation, and ongoing evidence collection
Operated and maintained Zero Trust network infrastructures using Tailscale and Cloudflare WARP, providing direct technical support to users while managing access policies and troubleshooting remote connectivity issues.
