[Hiring] Senior Platform Security Engineer @Form3 (via Otta)

Role Description

We're looking for an experienced Senior Platform Security Engineer to join Form3 on a contract basis as part of our AI Resilience & Security Enhancements programme. This is a hands-on role working closely with our engineering, platform and security teams. The main focus will be building security controls into our engineering platform and developer workflows.

• Design, evaluate and implement controls for secure autonomous agent execution, including policy enforcement, permissions, sandboxing, execution isolation and auditability.
• Evaluate and implement ways to detect vulnerable or unsafe code changes before merge, integrating security controls into CI/CD and pull request workflows.
• Explore both existing security tooling and AI-assisted approaches to code security, considering accuracy, false positives, bypasses and usability.
• Strengthen production access by implementing secure privileged-access controls, controlled access paths, least privilege, session controls and auditability.
• Adapt engineering tooling and workflows where needed to support safer production access.
• Strengthen CI/CD and software supply chain security, including secure builds, dependency and container scanning, provenance, artefact signing, SBOMs and policy enforcement.
• Build security automation and platform controls that are practical for engineering teams to use and maintain.
• Work directly with Form3 engineers on technical design, prototyping and implementation.
• Contribute to wider security engineering work where your experience is useful, working with Form3 security specialists where deeper domain knowledge is needed.
• Produce clear technical documentation and handover material.
• Deliver changes using structured, low-risk practices while maintaining service availability.

Qualifications

• Strong hands-on experience in Platform Engineering, DevOps, SRE, DevSecOps or Platform Security, with good security fundamentals.
• Experience implementing security controls yourself, rather than only reviewing systems or reporting security findings.
• Strong understanding of CI/CD and modern software delivery, including integrating security controls into engineering workflows.
• Good understanding of software supply chain security, such as dependency security, secure builds, provenance, signing or vulnerability management.
• Good understanding of IAM, RBAC and least privilege.
• Experience with container security and some practical Kubernetes knowledge.
• Comfortable writing automation or tooling in a programming language. Experience with Go or Python would be useful, with willingness to work in Go where needed.
• Experience working with engineers to deliver practical security improvements into production systems.
• Good communication and documentation skills.

Requirements

• Terraform or other Infrastructure as Code experience.
• Experience with AWS, GCP or other public cloud platforms.
• Security automation or policy-as-code experience.
• Experience with container/runtime isolation or sandboxing.
• Experience securing AI agents or other AI-enabled engineering tools.
• Experience using LLMs for security analysis or automation.
• Threat modelling experience.
• Knowledge of mTLS, PKI, cryptography or key management.
• Experience in regulated, financial or other business-critical environments.

Tech Stack

• Go / Python - security tooling and automation
• CI/CD - secure builds, automated security checks and engineering workflows
• Kubernetes - containerised workloads and runtime security
• Terraform - Infrastructure as Code and security automation
• AWS / GCP - cloud infrastructure
• IAM / RBAC - least privilege and privileged access controls
• Software supply chain security - scanning, provenance, signing, SBOMs and integrity controls
• Security policy and automation - policy enforcement, guardrails and automated controls
• AI security - secure agent execution, AI-assisted analysis and engineering controls

Interview Process

• Stage 1: Screening Call with Talent Team
• Stage 2: Platform Security & Secure Engineering Practices interview

Hiring Locations

• Austria
• Bulgaria
• Croatia
• Cyprus
• Denmark
• Estonia
• Finland
• Greece
• Hungary
• Italy
• Latvia
• Lithuania
• Malta
• Norway
• Romania
• Slovakia
• Slovenia