Senior Platform Engineer, Security

Doxel

Senior Platform Engineer with a focus on security at Doxel, enhancing cloud infrastructure and developer workflows. Join us in revolutionizing construction with AI-powered solutions.

Posted 6/28/2026full-timeSan Francisco • California • 🇺🇸 United StatesSenior💰 $175,000 - $220,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security posture management on Google Cloud, implementing infrastructure-as-code with Terraform, and embedding security practices into CI/CD workflows. Proven ability to drive platform adoption and influence engineering teams through a risk-based approach to security and compliance.

Highest-signal resume keywords

Cloud Security Posture ManagementInfrastructure-As-Code (Terraform)Kubernetes and Containerized WorkloadsSecurity Tooling in CI/CDProgramming/Scripting (Python, Go)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Infrastructure-As-CodeCloud SecurityKubernetesCI/CD Security ToolingPythonGoIAMNetworkingLeast-Privilege DesignRisk-Based Security

Soft Skills

Influencing Engineering TeamsSecurity Mindset

Tools & Technologies

Google CloudTerraformSASTSCASecret ScanningSupply Chain Controls

Certifications & Qualifications

SOC2ISO27001ISO27701

Industry Keywords

DevOpsPlatform EngineeringSite ReliabilitySecurity ComplianceGolden Paths

Tech Stack

Tools & technologies

AWSAzureCloudGoKubernetesPythonTerraform

About the role

Key responsibilities & impact

Work with DevOps team to build out golden paths that streamline developer and builder workflows applying shift left security policies on CI/CD deployment, internal tooling, LLM, and data science workflows
Own cloud security posture on Google Cloud, landing-zone guardrails, least-privilege IAM, secrets and key management, codified as infrastructure-as-code so secure defaults are baked into golden paths rather than bolted on after
Continuously evaluate attack surfaces across the application, infrastructure, and cloud, prioritize findings by exploitability and blast radius, and feed the highest-leverage fixes back into the platform
Set and enforce AI-usage best practices, guardrails for agentic coding tools internally and provide a security point of view on product AI/LLM features in partnership with engineering leadership
Action on improving security and compliance through a risk-based approach implementing SOC2, ISO27001, and ISO27701 security and compliance frameworks
Drive adoption and raise the security bar across engineering through better defaults, not mandates.

Requirements

What you’ll need

6+ years in platform engineering, infrastructure/DevOps, or site reliability, with real depth building infrastructure, not just operating it
Strong infrastructure-as-code skills (Terraform) and a track record of replacing ad hoc infra with reusable, self-service patterns
Hands-on cloud depth, ideally Google Cloud (AWS or Azure translates), including IAM, networking, and least-privilege design
Strong experience with Kubernetes and containerized workloads in production
Practical experience embedding security tooling into CI/CD (SAST, SCA, secret scanning, supply chain controls) and building secure-by-default pipelines
Strong programming or scripting ability (Python, Go, or similar) for building platform and automation tooling
A security mindset: you design for least privilege and think about how things get abused, even when security is not the headline of the task
Demonstrated ability to drive platform adoption and influence engineering teams without formal management authority.

Benefits

Comp & perks

Doxel provides comprehensive health/dental/vision benefits for employees and their families
Unlimited PTO policy
401(k) program
Flexible work environment
Actively seeks diversity at our company