Supabase Platform Security Engineer at Supabase strengthens security of infrastructure, cloud platform, Kubernetes, and containerized workloads. Responsible for identifying and reducing security risks and building scalable security mechanisms.
Responsibilities
Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure.
Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems.
Partner closely with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns.
Improve Kubernetes and container security across areas like workload isolation, RBAC, admission control, secrets, network policy, and runtime hardening.
Assess container runtime and Linux isolation risks, including capabilities, seccomp/AppArmor, namespaces, cgroups, and container escape scenarios.
Strengthen AWS security posture across IAM, account boundaries, network controls, logging, detection, encryption, and service configuration.
Build scalable mechanisms such as automation, guardrails, paved paths, detection, secure defaults, and review frameworks.
Distinguish between theoretical risk and material platform risk to prioritize security efforts effectively.
You Might Be a Good Fit If You
Have senior-level experience in platform security, cloud security, infrastructure security, container security, or security engineering.
Have deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals.
Have worked in large cloud environments, multi-cluster Kubernetes setups, developer platforms, SaaS platforms, or high-scale infrastructure teams.
Qualification
Deep practical experience with AWS
Required
Senior-level experience in platform security, cloud security, infrastructure security, container security, or security engineering
Deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals
Experience working in large cloud environments, multi-cluster Kubernetes setups, developer platforms, SaaS platforms, or high-scale infrastructure teams
