Platform Security Engineer
ITHAKA · Remote within the Continental United States
About this role
**ITHAKA — Platform Security Engineer** ## About the Role ITHAKA is seeking a **Platform Security Engineer** to mature DevOps capabilities into **DevSecOps** by embedding security into software delivery, infrastructure, and developer workflows. This role focuses on building practical engineering capabilities that help teams **identify, prioritize, and remediate security risks** more quickly and consistently. You’ll improve **automation**, integrate security tooling into existing workflows, and help make secure practices the default way of working—partnering with engineers, architects, and platform stakeholders across ITHAKA. Reports to the **Associate Director, Product Engineering** and is part of the **Technology Enabling Services** team, working closely with the **Chief Architect** on enterprise security strategy. ## Responsibilities - Build and improve engineering workflows and tooling for **vulnerability management** across applications, dependencies, containers, and infrastructure. - Advocate for integration of **security checks and policy controls** into software delivery pipelines and day-to-day developer workflows. - Improve **dependency management** and **package governance** to address software exposure consistently and sustainably. - Evaluate, implement, and tune security tooling including **SAST, DAST, SCA, secret scanning**, and related platform controls. - Build automation that reduces repetitive manual remediation work and speeds up secure delivery. - Partner with engineering teams to design and promote **secure-by-default patterns, templates, and guardrails**. - Work with engineers and technical leaders to **triage findings**, prioritize risks, and translate them into practical remediation plans. - Contribute to secure SDLC practices, documentation, and internal guidance aligned with how ITHAKA teams build and operate systems. - Measure effectiveness and adoption of security controls and recommend improvements over time. ## Experience and Skills - **3–5 years** of experience in security engineering, platform engineering, DevSecOps, or a closely related role. - Hands-on experience implementing **security tooling and controls** in modern software delivery environments. - Experience with **vulnerability management**, **dependency management**, **package governance**, or **software supply chain security**. - Familiarity with **CI/CD**, source control workflows, infrastructure automation, and cloud-based application environments. - Ability to write **scripts/automation** to improve security processes and reduce manual effort. - Strong judgment balancing **risk reduction**, **developer experience**, and **delivery needs**. - Clear communication skills and ability to work effectively with engineers, architects, and business stakeholders. - Ability to work independently while collaborating cross-functionally; ability to guide peers in your specialty. - Experience with **AWS** infrastructure and services; familiarity with common modern engineering tooling is helpful. - Experience using **AI-enabled tooling** in this area is beneficial but not required. ## Work Authorization and Sponsorship ITHAKA is **not currently considering candidates** who require **immigration sponsorship** (additional work authorization or permanent work authorization) to work in the United States. ## Compensation and Benefits - **Starting salary:** **$110,000–$120,000/year** (based on job-related knowledge, skills, and experience). - Benefits (for b
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.