[Hiring] Staff Platform Security Engineer @Docplanner

Role Description

The Internal Platform is a pivotal foundation that accelerates product development by providing a reliable, scalable, and self-service ecosystem. It supports the entire software lifecycle and is meticulously tailored to meet the organization’s technological needs and strategic direction.

• The platform enables development teams to operate autonomously in 80% of cases, reducing dependency on the Internal Platform team.
• Ensures that compliance, security, and business continuity are integrated across the entire platform, defending general reliability of services and data integrity.
• The Internal Platform team consists of 34 people including 27 individual contributors, 2 Staff Engineers, 4 Engineering Managers, and the Head of Internal Platform.
• The team is organized to efficiently address stakeholders' needs.

Challenges in the team include:

• Platform Security is a team within the Internal Platform, responsible for security and integrity of the underlying infrastructure.
• Developing and maintaining tools for Global Security to deliver vulnerability management platforms for application triaging and continuous compliance.
• Understanding and integrating the diverse technology stacks used by different teams within the complex Docplanner organization.
• Ensuring scalability and reliability of systems as Docplanner grows and expands.

You will work closely with:

• Global Security – as the main external stakeholder for security initiatives.
• PMS (Practice Management Systems) teams – to audit existing systems and support secure migration to the central platform.
• Core Team within Internal Platform – consulting on technical compliance and resolving misconfigurations or vulnerabilities.
• Experience Teams – providing guidance on infrastructure-related application security topics.
• Legal – ensuring alignment with data protection regulations and improving the security posture of the platform.

Your impact on our mission includes:

• Ensuring platform compliance with industry best practices and standards for security (ISO27001, C5, SOC2).
• Introducing security at every step of the platform lifecycle.
• Understanding and mitigating security threats before they arise.
• Optimizing system scalability and cost efficiency.
• Development, monitoring, and maintenance of Kubernetes clusters on several continents.
• CI/CD development and maintenance.
• Ensuring high availability of all services.
• Fixing urgent issues and optimizing performance.
• Supporting other team members in their daily work.

Qualifications

• At least 5 years of experience related to security.
• Vast experience with container orchestration platforms like Kubernetes and how to secure them (must-have).
• Experience in maintaining and developing policy for security-focused CNI/Service Mesh (e.g., Calico, Cilium).
• Ability to scan for and manage vulnerabilities at scale.
• Experience with Hashicorp Vault.
• Knowledge of Terraform and popular CI/CD tools.
• Experience in building scalable and secure production HA environments using AWS.
• Familiarity with network security services (e.g., AWS WAF/Cloudflare).
• Ability to develop tools or scripts in Bash or GO to automate work.
• Proficient in English (both spoken and written - min. B2 level).
• Ability to communicate effectively about security and best practices.

Requirements

• A salary adequate to your experience and skills.
• Flexible remuneration and benefits system via Flexoh, including restaurant card, transportation card, kindergarten, and training tax savings.
• True flexibility and work-life balance.
• Remote or hybrid work model with our hub in Barcelona.
• Flexible working hours (fully flexible, with only a couple of meetings weekly).
• Summer intensive schedule during July and August (work 7 hours, finish earlier).
• 23 paid holidays, with exchangeable local bank holidays.
• Additional paid holiday on your birthday or work anniversary.

Benefits

• Private healthcare plan with Adeslas for you and subsidized for your family (medical and dental).
• Access to hundreds of gyms for a symbolic fee in partnership with Wellhub.
• Access to iFeel, a technological platform for mental wellness offering online psychological support and counseling.
• Free English and Spanish classes.