Staff Platform Security Engineer, Security

🔥 14 hours ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

💵 $200k - $250k / year

⏰ Full Time

🔴 Lead

🏗️ Platform Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 8%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Phantom

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2021

₿ Crypto

🔐 Security

🌐 Web 3

Crypto • Security • Web 3

Phantom is a company that provides a digital wallet and support services for managing cryptocurrencies such as SOL, ETH, POL, and Bitcoin. It offers guidance on account management, connecting to popular crypto apps, staking, and using hardware devices like Ledger Nano. Phantom prioritizes security and assists users in managing their crypto assets safely, ensuring they are aware of potential scams and providing tips for securing their digital wallets. The platform also supports mobile access on iOS and Android devices, offering solutions for various troubleshooting issues and frequently asked questions.

📋 Description

• Own and improve security across Phantom’s multi-account AWS environment, including IAM, Identity Center, networking, compute, storage, secrets, logging, and organization-level guardrails • Secure production Kubernetes environments running on Amazon EKS, including cluster configuration, workload identity, RBAC, admission controls, network boundaries, secrets, container security, and tenant isolation • Design least-privilege access models for engineers, services, and automation • Build scoped, auditable, and time-bound access paths for sensitive production systems • Protect infrastructure supporting products and services that handle sensitive data and high-value operations • Lead security design for new infrastructure, platform services, and major architectural changes • Build reusable security controls using Pulumi, Terraform, Kubernetes policy engines, and automated configuration validation • Harden CI/CD and release systems, including GitHub Actions, workload federation, build runners, dependencies, artifacts, signing, provenance, and access to production environments • Build tools that identify and remediate cloud and Kubernetes risks at scale • Apply AI-assisted workflows where they improve analysis, coverage, or response speed • Partner with Infrastructure, SRE, Developer Experience, and product engineering teams • Establish platform-security standards and help teams adopt them

🎯 Requirements

• 7+ years of experience in platform security, cloud security, infrastructure security, security engineering, or a closely related engineering role • Deep, hands-on experience securing production AWS environments • Understanding of IAM and resource policies, workload identity, network security, secrets management, logging, and organization-level controls • Deep experience securing Kubernetes in production, preferably Amazon EKS • Experience with RBAC, workload identity, admission policy, network policy, pod security, secrets, and cluster hardening • Experience designing or securing mission-critical systems • Strong understanding of identity, authorization, least privilege, isolation, and blast-radius reduction • Experience securing CI/CD and software supply chains, including GitHub Actions or similar systems, build runners, workload federation, artifacts, and production deployment paths • Experience writing and reviewing infrastructure as code using Pulumi, Terraform, CloudFormation, or similar tools • Ability to write production-quality code or automation in TypeScript, Python, Go, or Rust • High agency and ownership • Clear communication and a strong track record of partnering with infrastructure and engineering teams • Candidates must be based in the US or Canada

🏖️ Benefits

• Equity • Eligibility to participate in the company’s performance bonus program • Comprehensive medical, dental, and vision insurance with 100% coverage • Stipend for your ideal remote setup • Flexible hours and a supportive remote environment • Unlimited vacation—take time when you need it • 401(k) retirement plan • Monthly wellness benefit • Weekly meal benefit • Global off-sites