Staff Platform Security Engineer

Hace 3 días

Barcelona, Cataluña, España Docplanner Jornada completa
Overview

Join Docplanner’s Internal Platform as a Platform Security Engineer and help safeguard a global, scalable ecosystem. You’ll work within a diverse security-focused team to integrate protection across the platform lifecycle and support cross-team initiatives. Your work will focus on securing infrastructure, enabling compliant, resilient services across continents and cloud environments. This is a chance to shape security practices at scale in a mission-driven company that values diverse, authentic collaboration. You’ll play a key role in making healthcare experiences safer and more reliable for millions of users.

Compensaciones / Beneficios
  • remote or hybrid work model
  • flexible working hours
  • private healthcare plan with Adeslas
  • gym access via Andjoy
  • English and Spanish classes
  • flexible remuneration via Flexoh
Responsabilidades
  • Develop and maintain security tooling to support vulnerability management and compliance across the platform
  • Collaborate with Global Security, PMS teams, Legal and Core Team to ensure secure migrations, encryption standards, and policy enforcement
  • Maintain and secure Kubernetes clusters across multiple regions and support HA production environments
  • Lead CI/CD security practices, automation, and incident response for escalated events (e.g., DDoS, abuse)
  • Audit and resolve misconfigurations and vulnerabilities across platform components, promoting secure CSP integrations
  • Drive security-by-design across the platform lifecycle and continuous improvement of security posture
Requisitos principales
  • 5+ years in security-related roles
  • Deep experience with Kubernetes and securing containerized environments (must-have)
  • Experience with security-focused CNI/Service Mesh (Calico, Cilium)
  • Vulnerability scanning and management at scale
  • Experience with Hashicorp Vault
  • Terraform and popular CI/CD tools
  • Production-grade AWS knowledge for scalable, secure, HA environments
  • Networking security services (AWS WAF/Cloudflare)
  • Scripting in Bash or Go for automation
  • English communication (min B2) and stakeholder alignment on security best practices
  • strong communication
  • collaboration across multiple teams
  • proactive risk management
  • Kubernetes cluster management and hardening
  • CNI/Service Mesh (Calico, Cilium) policy development
  • Vulnerability management at scale