Platform Security Engineer (AMER/APAC)

About this role

A Platform Security Engineer is sought to strengthen the security of Supabase’s infrastructure, cloud platform, Kubernetes environments, and containerised workloads. The role involves working with infrastructure, platform, SRE, and product engineering teams to reduce risk and implement secure-by-default patterns. It requires hands-on experience with AWS, Kubernetes, containers, Linux, and large cloud environments, and focuses on improving the security posture of the developer platform. The position is remote and global, with emphasis on pragmatic engineering and scalable guardrails. The successful candidate will help prioritise security efforts by balancing risk with practical delivery.

What you would do

• Identify and reduce security risk across AWS, Kubernetes, containerised workloads, and platform infrastructure.
• Conduct threat modelling, architecture reviews, and technical risk assessments for platform and infrastructure systems.
• Partner with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns.
• Improve Kubernetes and container security across workload isolation, RBAC, admission control, secrets, network policy, and runtime hardening.
• Assess container runtime and Linux isolation risks, including capabilities, seccomp/AppArmor, namespaces, cgroups, and container escape scenarios.
• Strengthen AWS security posture across IAM, account boundaries, network controls, logging, detection, encryption, and service configuration.
• Build scalable mechanisms such as automation, guardrails, paved paths, detection, secure defaults, and review frameworks.
• Prioritise security efforts by distinguishing theoretical risk from material platform risk.

What they are asking for

• Senior-level experience in platform security, cloud security, infrastructure security, container security, or security engineering.
• Deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals.
• Experience in large cloud environments, multi-cluster Kubernetes setups, developer platforms, SaaS platforms, or high-scale infrastructure teams.
• Ability to reason about identity, networking, workload isolation, runtime security, secrets, supply chain, and blast radius.
• Clear communication skills across technical and non-technical audiences, especially in written, asynchronous environments.
• Ability to manage security efforts across complex projects with multiple stakeholders.

Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.