Senior Security Platform Engineer - Secure Delivery at Ashby · LumiJobs

Responsibilities

We’re looking for a platform engineer to build the secure-delivery capabilities other engineers use every day. You’ll turn security requirements into reliable integrations, useful feedback, and self-service workflows that work across our production repositories.
You’ll treat engineers as your users and own the operation of what you ship. You’ll use existing tools where they fit and build the capabilities that materially improve our delivery workflow.
We’re also advertising this opening as Senior DevSecOps Engineer. Both titles describe the same position; please apply once using the title that best reflects your experience.
Your mission is to make our delivery pipeline secure by default across application code, infrastructure, dependencies, containers, and product configuration. You’ll own the technical implementation and operation of delivery-security tooling and controls, including integration, configuration, tuning, reliability, and coverage.
Product Engineering teams own triage and remediation for the features they maintain. Application Security provides specialist analysis and defines product-security test requirements. Infrastructure retains ownership of the underlying cloud platform. You’ll work with those teams to make agreed checks and policies run reliably in the delivery workflow.
In practice, you’ll:
Deploy, configure, integrate, and tune static analysis, dependency, secret, container, and Infrastructure as Code scanning in our CI/CD workflows.
Inventory production repositories and delivery paths, including prompts and model configuration. Make scanner coverage distinct from application-specific tests of AI behavior; AppSec defines those tests, and you operate agreed delivery checks.
Start new checks in report-only mode where appropriate, then implement agreed warn and block policies using exploitability, exposure, and compensating controls.
Give engineers self-service exceptions within documented rules, with an owner, justification, expiry, and audit trail. Escalate decisions outside those rules to Security leadership with the relevant specialist analysis.
Build automation and AI-assisted workflows that enrich findings, propose fixes, and support Product Engineering’s triage under documented criteria. Preserve required checks, review, and rollback for automated patch changes.
Make coverage, integration failures, finding age by risk, time to triage and remediate, false blocks, build delay, and bypasses visible. Record mitigations separately from completed fixes and connect useful telemetry to GRC evidence.

Senior Security Platform Engineer - Secure Delivery

Responsibilities

Benefits

Company

Ashby

More roles at Ashby