Security Operations Engineer - West Coast US & Canada

About Platform.sh

Platform.sh is a remote-first global workforce building a better cloud platform to create, manage and responsibly scale web applications.

As a collective with diverse backgrounds, we work together to test, innovate, and challenge one another, finding new ways to reimagine digital experiences. We’re here to help our customers thrive. 

Bring your experience to our team, and help us build a better way.

Position summary

Platform.sh is looking for a Security Operations Engineer to drive the operational efficiency of the Security team, lead security incident response, and assist in keeping an eye on global activity in order to maintain our security posture. This is a recently established position so you will be getting in on the ground floor, contributing to its growth and helping to mature processes.

This role reports to our Security Operations Manager and works in close interaction with all teams within our organization.

What you can expect

• Take charge of the on-call rotation, providing assistance for both internal and external (customer-related) matters, in a role akin to a “first responder”.
• Coordinate with other departments in handling incidents or their prevention (e.g., call for a patch rollout, incident clean-up)
• Investigate ongoing and completed incidents to provide an RCA (Root Cause Analysis)
• Ensure all systems and services in our environment are securely configured and monitored
• Develop and maintain logging and monitoring capabilities across our cloud surface, using built-in tools or custom ones
• Guide the creation of new detection use cases
• Improve accuracy and false positive detection to minimize noise
• Create and improve internal procedures for handling security incidents
• Develop Cyber Threat Intelligence capabilities
• Monitor and improve UEBA tools and alerting
• Support other Security teams in responding to information requests, both formal and informal
• Coordinate penetration testing, vulnerability scanning, and related activities
• Work with other Security teams to gather evidence for our ongoing certifications such as PCI-DSS and SOC 2

What you bring

• Excellent oral and written communication skills. As a worldwide company, English is our lingua franca and Markdown is our notation of choice
• Command of general Linux fare (kernel, core utils, terminal, shell scripting, man pages, etc.)
• Comfortable with using only the terminal to complete tasks (SSH/CLI tools are ubiquitous in our workflows)
• Good knowledge of IaaS solutions such as AWS, GCP or Azure
• Strong understanding of monitoring and detection technologies in cloud network architectures with complex topologies
• Proficiency in shell scripting and/or Python
• One to two years of aggregate experience in similar roles (e.g., L3 Support, SOC Analyst) 

Nice to have

• CSP certifications (check our providers here), where Security or Operations focused are preferred (e.g., AWS: Cloud Practitioner, SysOps Administrator, Certified Security)
• General security certifications from entities like ISC2 and GIAC (e.g., SSCP, GCIH)
• Demonstrable experience in regulatory compliance such as PCI-DSS or SOC 2 Type II
• In-depth knowledge of Platform.sh provided software (check our docs here)

This is a remote job. Work from anywhere within the Americas region!

We’re a worldwide, distributed team looking for the best talent. Our remote model has been in practice and thriving since 2014. To us, remote work means flexibility and having truly diverse, global teams. A clear and concise written communication style is required for success in the role and the company. The cover letter to your application will be the first test of this metric.

To maximize team coverage, this role is preferred in the West Coast (US & Canada), time zones ranging from UTC-8 to UTC-6.

Company benefits and perks

• An innovative product you can believe in. We’re sustainably changing the way companies develop and manage their web applications
• We’re voted as A Best Place to Work by 96% of our employees, Forbes Top 30 Companies for Remote Jobs, and in France Best Workplaces for Women 
• Hands on leadership that cares in a flexible, open work environment, where your voice is encouraged. We can always find ways to do better and look forward to hearing your ideas
• A global team, rich with culture and diversity
• Company-wide DE&I initiative that you can be a part of
• Annual international company and team meetups (when we're not experiencing a pandemic)
• Wellness stipend and Professional development budget
• Office equipment budget
• Fair PTO (standards based on location)
• Inclusive parental leave (timeline based on location)
• Healthcare, dental, and vision (US, CA, UK, and FR employees only)
• Tandem – a pool of linguists from around the world willing to help each other work on learning new languages
• Additional compensation for on-call ops and support employees
• Company shares (discretionary)
• Unlimited Platform.sh accounts

How we hire

We know that a great hire won’t meet every requirement that we’ve outlined. If you can see yourself elevating the team, we want to hear your story. Few of us would be here had we not taken a chance.   

You can expect 3 – 4 interviews on Google Meet. You will have the opportunity to meet with a variety of Platformers throughout the interview process. You’ll also have the opportunity to schedule virtual coffee chats with potential future peers to see if you can envision working together. Use interview and coffee time to make sure the company aligns with what you’re looking for in your future working environment. 

Expect a higher number of interviews for director-level roles and above. All roles require background checks. 

About our software

Platform.sh is a unified, secure, enterprise-grade platform to build, run, and scale fleets of websites and applications. We are trusted by 5500+ organizations globally to help create innovative digital experiences.