Monaco
Senior Platform Security Engineer
San Francisco · Senior
Sponsorship not specifiedDetected 55 days ago
AWSKubernetesTerraformCI/CDRESTCybersecuritySIEMComplianceCRMPipeline ManagementSupply ChainFirewallZero Trust
About the role
- You'll be the person who makes "secure by default" the path of least resistance for a fast-moving engineering team handling sensitive revenue data at scale.
Responsibilities
- Own company-wide compliance. Drive our compliance program (SOC 2 and beyond) end-to-end with Vanta, turning controls into automated, continuously-verified guardrails rather than point-in-time checkbox exercises.
- Lead secure system design. Set the bar for secure-by-default architecture across product and infrastructure - threat modeling, least privilege, secrets management, encryption, and defense in depth baked into how we build.
- Secure the software supply chain at scale. Own dependency and container image scanning, artifact integrity, vulnerability response SLAs, and CI/CD pipeline hardening across a multi-account, GitOps-driven environment.
- Run the external security program. Procure and orchestrate penetration tests, web and vulnerability scanning vendors, and third-party compliance audits - and own remediation through to closure.
- Own company-wide compliance.
Requirements
- 5+ years of experience in security engineering or a related role.
- Strong track record with Kubernetes, Terraform (or comparable IaC), and securing CI/CD and GitOps pipelines.
- Ability to ramp quickly and move fast without hand-holding.
Nice to have
- Experience with cloud security monitoring and detection (GuardDuty, CloudTrail, AWS Config, WAF, or SIEM tooling).
- Database security depth - encryption at rest/in transit, audit logging, and managed PostgreSQL.
- Zero-trust networking experience and familiarity with private-network access models.
- We're an in-person team - 5 days in the office.
- At this stage, proximity genuinely accelerates product quality and team cohesion.
Skills
- Our founders are industry veterans who previously led companies like Brex, Apollo, and Clari.
Company info
- Embed security into the team. Partner across engineering so security accelerates shipping instead of blocking it, and grow into the technical authority on how Monaco protects its platform and customers.
- What We're Looking For
This listing is sourced directly from Monaco's careers page and normalized into a canonical job model.