Senior Security Platform Engineer – Secure Delivery

🔥 15 hours ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

💵 $178k - $250k / year

⏰ Full Time

🟠 Senior

🏗️ Platform Engineer

👻 Ghost score 22%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 1 day.
• Jobs at this company usually fill in 42 days.
• 71 open roles for a team of 66.

Apply Now

Check your resume score

Customize resume + cover letter

Find Similar Remote Jobs

☆ Save☑️ Mark as applied❌ Hide

Report problem

Ashby

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🤝 B2B

👥 HR Tech

Consulting • B2B • HR Tech

Ashby is a software development company that specializes in providing hiring solutions for high-growth companies. Their platform enables teams of all sizes to manage an efficient and effective hiring process, helping organizations achieve their ambitious growth targets. Notable clients include Opendoor, Figma, Notion, Deel, and Modern Treasury.

📋 Description

• Build secure-delivery capabilities used by engineers across production repositories • Turn security requirements into reliable integrations, useful feedback, and self-service workflows • Deploy, configure, integrate, and tune static analysis, dependency, secret, container, and Infrastructure as Code scanning in CI/CD workflows • Inventory production repositories and delivery paths, including prompts and model configuration • Implement report-only, warning, and blocking policies based on exploitability, exposure, and compensating controls • Provide self-service exceptions with owners, justifications, expirations, and audit trails • Build automation and AI-assisted workflows that enrich findings, propose fixes, and support triage • Maintain required checks, review, and rollback for automated patch changes • Measure coverage, integration failures, finding age by risk, triage and remediation time, false blocks, build delay, and bypasses • Connect useful telemetry to GRC evidence • Work with Infrastructure on cloud-posture monitoring, critical-misconfiguration alerts, and bounded remediation automation • Extend shared-image hardening and artifact provenance • Own the operation, reliability, tuning, integration, and coverage of delivery-security tooling and controls • Collaborate with Product Engineering, Application Security, Infrastructure, and Security leadership • Report directly to the Head of Security

🎯 Requirements

• Experience building and operating CI/CD, developer tooling, or infrastructure automation used by other engineers • Ability to write maintainable production code • Ability to explain failure modes and use security evidence for rollout decisions • Supply-chain and scanner experience useful • Experience applying AI in engineering and checking its outputs and permissions • Experience with GitHub Actions or comparable CI/CD systems • Experience with Terraform • Experience with containers and cloud controls • Comfortable writing production automation in TypeScript, Python, Go, or a comparable language • Personally written and maintained code for a CI/CD capability, developer tool, or infrastructure automation relied on by other engineers • Personally written, reviewed, and shipped production application code for a SaaS product used by real customers

🏖️ Benefits

• Competitive salary and equity • 10-year exercise window for stock options • Unlimited PTO • Minimum of 12 weeks of fully paid parental leave • Generous equipment, software, and office furniture budget • $100/month education budget • Conferences covered with manager approval • US health insurance for employees and dependents with 100% of premiums covered by Ashby • High-quality supplemental health insurance for employees and dependents outside the US, fully covered by Ashby

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume