Note: The job is a remote job and is open to candidates in USA. Beghou is seeking a Platform Security Engineer to strengthen and scale security practices across its technology platforms, including SaaS products, data management platforms, cloud infrastructure, and AI-assisted engineering. The role focuses on security automation, governance, secure software delivery, cloud security assessment, architecture reviews, and collaboration across engineering, IT, and governance teams.
Responsibilities
- Improve and extend security patterns across Beghou technology platforms, with focus on our software and data management offerings
- Build on existing controls such as GitHub Advanced Security to improve automation, transparency, and coverage across engineering workflows
- Support secure software delivery practices across code, pull requests, secret management, dependency management, infrastructure-as-code, and CI/CD
- Help define and evolve practical guardrails for AI-assisted and agentic coding, including secure usage patterns and review expectations
- Support tighter scanning baselines and continuous assessment across AWS, Azure, Databricks, Entra ID, and related platform infrastructure
- Partner on architecture and design reviews for new platform capabilities and high-impact changes
- Collaborate with IT and governance teams on endpoint, identity, compliance, and audit-related security practices
- Help develop security documentation, implementation guidance, training materials, and reporting metrics
Skills
- 6+ years of experience in security engineering, application security, cloud security, platform security, or a related area
- Experience with modern software delivery environments, including source control, CI/CD, dependency management, and cloud deployment practices
- Experience with security scanning and related controls such as code scanning, dependency scanning, secret scanning, or infrastructure scanning
- Working knowledge of AWS and Azure security concepts
- Strong collaboration and communication skills across technical and non-technical stakeholders
- Must be legally authorized to work in the United States
- Experience with GitHub Advanced Security, CodeQL, or similar tooling
- Experience with Databricks or data platform security
- Experience with Entra ID, Azure security services, or AWS security tooling
- Familiarity with NIST, SOC 2, ISO 27001, or related frameworks
- Experience supporting audits, remediation tracking, or security documentation
Benefits
- Comprehensive medical, dental, and vision insurance
- Life & AD&D coverage
- Disability insurance
- Lifestyle Wellness Account
- Generous PTO
- Company holidays
- Paid parental & bonding leave
- Flexible hybrid work policy with in-person collaboration and remote flexibility
- 401(k) and employer match
- Tax-free commuter, health, and childcare accounts
- Performance bonuses
- Monthly phone stipend
- Employee discount program
- Mentorship
- Training
- Tuition reimbursement
- Charitable donation match
Company Overview