Note: The job is a remote job and is open to candidates in USA. ITHAKA is seeking a Platform Security Engineer to mature its DevOps capabilities into DevSecOps by embedding security into software delivery, infrastructure, and developer workflows. The role builds automation and integrates security tooling to help teams identify, prioritize, and remediate risks, while partnering with engineers, architects, and platform stakeholders to promote secure-by-default practices.

Responsibilities

• Build and improve engineering workflows and tooling for vulnerability management across applications, dependencies, containers, and infrastructure
• Advocate for integration of security checks and policy controls into software delivery pipelines and day-to-day developer workflows
• Improve dependency management and package governance so teams can address software exposure consistently and sustainably
• Help evaluate, implement, and tune security tooling includingSAST, DAST, SCA, secret scanning, and related platform controls
• Build automation that reduces repetitive manual remediation work and speeds up secure delivery
• Partner with engineering teams to design and promote secure-by-default patterns, templates, and guardrails
• Work with engineers and technical leaders to triage findings, prioritize risks, and translate them into practical remediation plans
• Contribute to secure software development lifecycle practices, documentation, and internal guidance that align with how ITHAKA teams build and operate systems
• Measure the effectiveness and adoption of security controls and recommend practical improvements over time

Skills

• 3-5 years of experience in security engineering, platform engineering, DevSecOps, or a closely related technical role
• Hands-on experience implementing security tooling and controls in modern software delivery environments
• Experience with vulnerability management, dependency management, package governance, or software supply chain security
• Familiarity with CI/CD, source control workflows, infrastructure automation, and cloud-based application environments
• Ability to write scripts or automation to improve security processes and reduce manual effort
• Strong judgment about balancing risk reduction, developer experience, and delivery needs
• Clear communication skills and the ability to work effectively with engineers, architects, and other business stakeholders
• Ability to work independently while also collaborating effectively as part of a cross-functional team, managing substantive technical work, and guiding peers in an area of specialty
• ITHAKA is not currently considering candidates who require any type of immigration sponsorship (additional work authorization or permanent work authorization) to work in the United States
• At this time, we're not considering candidates who are unable to work and reside in the continental U.S
• Experience with AWS infrastructure and services, and common engineering tooling used in modern product organizations is helpful
• Experience using AI-enabled tooling in this area is beneficial but not required

Benefits

• For benefits-eligible employees: medical plans
• For benefits-eligible employees: dental plans
• For benefits-eligible employees: vision plans
• For benefits-eligible employees: an employer-paid 10% retirement contribution
• For benefits-eligible employees: paid parental and caregiver leave
• For benefits-eligible employees: 22 days of paid time off
• For benefits-eligible employees: 11 paid holidays
• For benefits-eligible employees: up to 12 paid sick days
• For benefits-eligible employees: wellness benefits

Company Overview