[Hiring] Platform Security Engineer @Supabase

Role Description

We’re looking for a Platform Security Engineer to join our team and help strengthen the security of Supabase’s infrastructure, cloud platform, Kubernetes environments, and containerized workloads as we continue to scale. You’ll work closely with infrastructure, platform, SRE, product engineering, and technical leadership, helping us proactively reduce risk across the systems that run Supabase.

This role is ideal for someone who has deep hands-on experience with:

• AWS
• Kubernetes
• Containers
• Linux
• Large cloud environments

Success in this role means improving the security posture of the platform through pragmatic engineering, clear technical judgment, and scalable guardrails.

Qualifications

• Senior-level experience in platform security, cloud security, infrastructure security, container security, or security engineering.
• Deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals.
• Experience in large cloud environments, multi-cluster Kubernetes setups, developer platforms, SaaS platforms, or high-scale infrastructure teams.
• Ability to reason clearly about identity, networking, workload isolation, runtime security, secrets, supply chain, and blast radius.
• Strong communication skills across both technical and non-technical audiences, especially in a written, asynchronous environment.
• Able to manage security efforts across complex projects with various stakeholders.
• Energized by solving real-world infrastructure security problems and navigating ambiguity while moving quickly.
• Preference for building guardrails, automation, and secure defaults over creating unnecessary process or bottlenecks.

Requirements

• Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure.
• Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems.
• Partner closely with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns.
• Improve Kubernetes and container security across areas like workload isolation, RBAC, admission control, secrets, network policy, and runtime hardening.
• Assess container runtime and Linux isolation risks, including capabilities, seccomp/AppArmor, namespaces, cgroups, and container escape scenarios.
• Strengthen AWS security posture across IAM, account boundaries, network controls, logging, detection, encryption, and service configuration.
• Build scalable mechanisms such as automation, guardrails, paved paths, detection, secure defaults, and review frameworks.
• Distinguish between theoretical risk and material platform risk to prioritize security efforts effectively.

Benefits

• Fully Remote: We hire globally and provide a WeWork membership or co-working allowance.
• ESOP: Every team member receives equity ownership in the company.
• Tech Allowance: Budget for setting up your ideal work environment.
• Health Benefits: 100% health insurance coverage for employees and 80% for dependents.
• Annual Off-Sites: A week of connection, collaboration, and fun in a new city.
• Flexible Work: Operate asynchronously and manage your own time.
• Professional Development: Annual education allowance for courses, books, conferences, or anything that supports your growth.