Platform Security Engineer

Responsibilities

• Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure.
• Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems.
• Partner with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns.
• Improve Kubernetes and container security through workload isolation, RBAC, admission control, secrets management, network policy, and runtime hardening.
• Assess container runtime and Linux isolation risks, including capabilities, seccomp/AppArmor, namespaces, cgroups, and container escape scenarios.
• Strengthen AWS security across IAM, account boundaries, network controls, logging, detection, encryption, and service configuration.
• Build scalable automation, guardrails, paved paths, detection mechanisms, secure defaults, and review frameworks.
• Prioritize security efforts by distinguishing theoretical risk from material platform risk and manage initiatives across complex stakeholder groups.

Requirements

• Senior-level experience in platform security, cloud security, infrastructure security, container security, or security engineering.
• Deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals.
• Experience with large cloud environments, multi-cluster Kubernetes deployments, developer platforms, SaaS platforms, or high-scale infrastructure teams.
• Strong understanding of identity, networking, workload isolation, runtime security, secrets, supply chain, and blast radius.
• Clear written communication across technical and non-technical audiences in an asynchronous environment.
• Ability to manage security efforts across complex projects with multiple stakeholders.
• Pragmatic approach to building guardrails, automation, and secure defaults while navigating ambiguity and moving quickly.

Benefits

• Fully remote work with global hiring and no required Supabase office; WeWork membership or co-working allowance provided.
• ESOP equity ownership for every team member.
• Tech allowance for equipment such as a laptop, monitor, or headphones.
• Supabase covers 100% of employee health insurance and 80% for dependents, wherever applicable.
• Annual company off-site held in a new city for one week.
• Flexible asynchronous work schedule.
• Annual professional development and education allowance for courses, books, conferences, or other learning.