Platform Security Engineer

Outset

. Identify, assess, and help remediate security risks across AWS infrastructure, Terraform code, application architecture, and product code .

Posted 10/13/2026full-timeSan Francisco • California • United StatesMid-LevelSenior💰 $210,000 - $300,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security, cloud security, and infrastructure security, with a strong focus on AWS and Terraform. Capable of assessing security risks, developing security tooling, and collaborating with engineering teams to enhance system security and operational workflows.

Highest-signal resume keywords

AWS SecurityTerraform Security PracticesSIEM Detection RulesApplication Security AssessmentIncident Response

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application SecurityCloud SecurityInfrastructure SecuritySecurity AutomationScripting SkillsSecurity Tool DevelopmentVulnerability ManagementPenetration TestingSecurity Risk AssessmentInfrastructure Hardening

Soft Skills

Clear CommunicationCollaborative ApproachSound Judgment

Tools & Technologies

SIEMAWSTerraformCloud TelemetryLogging Tools

Certifications & Qualifications

SANS FOR509Incident Response CertificationThreat Modeling Certification

Industry Keywords

Security StandardsSecurity ReviewsAPI SecurityData ProtectionIdentity and Access Management

Tech Stack

Tools & technologies

AWSCloudTerraform

About the role

Key responsibilities & impact

Identify, assess, and help remediate security risks across AWS infrastructure, Terraform code, application architecture, and product code
Partner with engineering teams to design secure systems and integrate security into development and operational workflows
Participate in security reviews of RFC and PRR documentation
Review application and infrastructure changes requiring additional security scrutiny
Participate in external penetration tests and help improve the penetration-testing program
Serve as lead platform investigator during security and privacy incidents
Analyze application, cloud, identity, network, audit, and infrastructure telemetry to determine incident scope, impact, and root cause
Translate investigation findings into containment actions, remediations, improved detections, and technical documentation
Design, implement, tune, and maintain SIEM detection rules
Investigate and respond to alerts involving AWS infrastructure, application behavior, access patterns, data movement, and platform activity
Improve logging and telemetry for threat detection and incident investigation
Develop security tooling and automation to help engineers identify and address vulnerabilities earlier
Partner with SRE and engineering teams on cloud configuration, identity and access management, secrets management, vulnerability management, and infrastructure hardening
Establish practical security standards that reduce risk without unnecessarily slowing product development

Requirements

What you’ll need

Hands-on experience in application security, cloud security, infrastructure security, or security-focused site reliability engineering
Experience securing production systems in AWS, including familiarity with identity, networking, logging, data protection, and common cloud attack paths
Strong working knowledge of Terraform and infrastructure-as-code security practices
Ability to assess security across infrastructure and application layers
Experience reviewing application architecture or source code for security vulnerabilities and design weaknesses
Familiarity with application, API, authentication, authorization, and data-security risks
Experience investigating complex technical events using application logs, cloud telemetry, audit trails, and other security data
Experience writing, tuning, or responding to SIEM detection rules
Ability to distinguish meaningful security signals from expected production behavior and noisy telemetry
Experience evaluating penetration-test findings and partnering with engineers on remediation
Strong scripting or software-development skills for security tools, automations, and integrations
Demonstrated proficiency with agentic software development
Sound judgment balancing security risk, operational reliability, engineering effort, and product priorities
Clear written and verbal communication with engineering and non-engineering stakeholders
Collaborative approach to helping engineering teams build safer systems
Willingness to work 4 days a week onsite in the San Francisco office
Legally authorized to work in the United States
SANS FOR509 training or certification, purple teaming, technical project management, incident response, threat modeling, detection engineering, cloud forensics, and security automation are bonus qualifications

Benefits

Comp & perks

Equity offered 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score