Platform Security Engineer (the Americas/Asia-Pacific)

Job description

About this role

Start in minutes with a fully managed, scalable Postgres database and a suite of tools that eliminate the complexity of backend development. Use one or use all—Supabase gives teams the flexibility of open source with the speed and simplicity of a modern platform, so they can move fast without sacrificing control. We’re looking for a Platform Security Engineer to join our team and help strengthen the security of Supabase’s infrastructure, cloud platform, Kubernetes environments, and containerized workloads as we continue to scale.

Responsibilities

• Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure.
• Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems.
• Partner closely with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns.
• Improve Kubernetes and container security across areas like workload isolation, RBAC, admission control, secrets, network policy, and runtime hardening.
• Assess container runtime and Linux isolation risks, including capabilities, seccomp/AppArmor, namespaces, cgroups, and container escape scenarios.
• Strengthen AWS security posture across IAM, account boundaries, network controls, logging, detection, encryption, and service configuration.
• Build scalable mechanisms such as automation, guardrails, paved paths, detection, secure defaults, and review frameworks.
• Distinguish between theoretical risk and material platform risk to prioritize security efforts effectively.

Qualifications and requirements

• Have senior-level experience in platform security, cloud security, infrastructure security, container security, or security engineering.
• Have deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals.
• Have worked in large cloud environments, multi-cluster Kubernetes setups, developer platforms, SaaS platforms, or high-scale infrastructure teams.
• Can reason clearly about identity, networking, workload isolation, runtime security, secrets, supply chain, and blast radius.
• Communicate clearly across both technical and non-technical audiences, especially in a written, asynchronous environment.
• Are able to manage security efforts across complex projects with various stakeholders
• Are energized by solving real-world infrastructure security problems and navigating ambiguity while moving quickly.
• Prefer building guardrails, automation, and secure defaults over creating unnecessary process or bottlenecks.