Platform Security Engineer
Application Security
Cloud Platforms
Cloud Security
Cyber Security Engineer
Data Security
DevOps
DevSecOps
Facilities Management
Information Security
InfoSec
Microsoft Azure Security
Platform Security
Project Management
Risk Management
Security
Security Automation
Security Compliance
Security Devops
Security Engineering
Security Standards
Security Testing
Software Security
Job Description
Chatham Financial is evolving its security platform in a cloud-native financial risk and advisory SaaS environment. As a Platform Security Engineer, you will help strengthen security across Azure infrastructure, applications, and CI/CD pipelines, while supporting a development model that scales securely. This role is focused on maturing security practices to improve compliance readiness, including progress toward SOC 2, and embedding security into everyday developer workflows.
Responsibilities
- Design, build, and implement security controls across Azure cloud infrastructure, containerized environments, and .NET applications at the platform level for broad coverage
- Ship security capabilities that are highly leveraged across the development platform
- Mature cloud security and application security practices, including secure architecture patterns
- Collaborate cross-functionally with Engineering, Compliance, and Information Security to embed security into the SDLC via CI/CD pipeline and developer workflow integration
- Implement and improve cloud security scanning and posture management to reduce misconfigurations, vulnerabilities, and drift across Azure environments
- Identify and address emerging risks related to AI/LLM usage across the SDLC
- Evaluate, implement, and operate platform tooling with an emphasis on automation and scalability
- Use AI to support engineering work across learning, investigations and debugging, and code creation and review
- Document platform standards for secure coding
Requirements
- 3+ years of experience in security engineering with a strong foundation in software or cloud engineering
- Experience building applications across the full Software Development Life Cycle, from initial coding through production deployment and operations
- Experience integrating security into CI/CD pipelines and developer tooling
- Hands-on cloud security expertise with Azure required; AWS familiarity preferred
- Experience securing modern application stacks, including .NET applications and containerized environments
- Strong application security fundamentals, including secure coding practices, threat modeling, and common vulnerabilities such as OWASP Top 10
- Strong problem-solving skills with the ability to operate tactically
- Experience with security tooling including SAST, DAST, container scanning, and CSPM
- Excellent collaboration and communication skills, especially when partnering with engineering teams and Information Security
What Success Looks Like (First 12 Months)
- Reduced the burden of implementing secure coding for all Engineering teams
- Collaborated effectively with adjacent teams, including Information Security, Engineering, Governance/Risk/Compliance, and IT
- Prioritized operational work alongside project development
- Implemented security controls via code within CI/CD pipelines and development workflows
- Strengthened and matured cloud and application security practices across the organization
- Maintained and improved robust policy scanning and vulnerability management practices
- Automated and maintained audit control evidence to support SOC 2 requirements
Technologies: Azure, AWS, .NET, CI/CD, SAST, DAST, CSPM, OWASP Top 10
Similar Jobs
