Senior Platform Security Engineer - AI Resilience & Security Enhancements
**THE PROJECT** 我们正在寻找一个经验丰富的 **高级平台安全工程师**,作为我们 AI 弹性和安全增强计划的一部分，以合同为基础加入 Form3.这是与我们的工程，平台和安全团队密切合作的实践角色。主要重点将是建立安全控制在我们的工程平台和开发人员工作流程中。你将在安全自主代理执行，CI/CD 和代码安全，生产访问控制和软件供应链安全等领域工作。我们正在寻找能够理解安全问题，制定实用控制，原型和实现解决方案，以及需要更大的应用程序变化时与软件工程师合作的人。**关键责任** - 设计，评估和实施安全自主代理执行的控制，包括政策执法，权限，沙盒，执行隔离和审计能力。- 在合并之前评估和实施检测脆弱或不安全代码变化的方法，将安全控制集成到 CI/CD 中，并拉动请求工作流程。- 探索现有的安全工具和人工智能辅助方法，以考虑准确性，虚假正面，绕过和可用性。-通过实施安全的特权访问控制，受控访问路径，最小特权，会议控制和审计能力加强生产获取。- 在必要时适应工程工具和工作流程来支持更安全的生产获取；- 增强 CI/CD 和软件供应链安全，包括安全构建，依赖性和容器扫描，来源，文物签署，SBOM 和政策执行。- 建立安全自动化和平台控制，使工程团队能够使用和维护。- 直接与 Form3工程师合作，进行技术设计，原型制造和实施。- 在你的经验有用的地方，与 Form 3安全专家一起工作，在需要更深入的领域知识的情况下。- 生产清晰的技术文档和交付材料。- 使用结构化，低风险实践来实现变化，同时保持服务可用性。**WERE LOOK FOR** **Essential** - 在**平台工程，DevOps,SRE,DevSecOps 或平台安全**方面有强大的实践经验，具有良好的安全基础。- 经验自己实施安全控制，而不是仅仅审查系统或报告安全发现。
查看英文原文
**THE PROJECT** 📝
We're looking for an experienced **Senior Platform Security Engineer** to join Form3 on a contract basis as part of our AI Resilience & Security Enhancements programme.
This is a hands-on role working closely with our engineering, platform and security teams. The main focus will be building security controls into our engineering platform and developer workflows.You'll work across areas such as secure autonomous agent execution, CI/CD and code security, production access controls and software supply chain security.
We're looking for someone who can understand a security problem, work out practical controls, prototype and implement solutions, and work with software engineers where larger application changes are needed.
**Key responsibilities**
- Design, evaluate and implement controls for secure autonomous agent execution, including policy enforcement, permissions, sandboxing, execution isolation and auditability.
- Evaluate and implement ways to detect vulnerable or unsafe code changes before merge, integrating security controls into CI/CD and pull request workflows.
- Explore both existing security tooling and AI-assisted approaches to code security, considering accuracy, false positives, bypasses and usability.
- Strengthen production access by implementing secure privileged-access controls, controlled access paths, least privilege, session controls and auditability.
- Adapt engineering tooling and workflows where needed to support safer production access.
- Strengthen CI/CD and software supply chain security, including secure builds, dependency and container scanning, provenance, artefact signing, SBOMs and policy enforcement.
- Build security automation and platform controls that are practical for engineering teams to use and maintain.
- Work directly with Form3 engineers on technical design, prototyping and implementation.
- Contribute to wider security engineering work where your experience is useful, working with Form3 security specialists where deeper domain knowledge is needed.
- Produce clear technical documentation and handover material.
- Deliver changes using structured, low-risk practices while maintaining service availability.
**WE’RE LOOKING FOR** 🔍
**Essential**
- Strong hands-on experience in **Platform Engineering, DevOps, SRE, DevSecOps or Platform Security**, with good security fundamentals.
- Experience implementing security controls yourself, rather than only reviewing systems or reporting security findings.
- Strong understanding of **CI/CD and modern software delivery**, including integrating security controls into engineering workflows.
- Good understanding of **software supply chain security**, such as dependency security, secure builds, provenance, signing or vulnerability management.
- Good understanding of **IAM, RBAC and least privilege**.
- Experience with container security and some practical Kubernetes knowledge.
- Comfortable writing automation or tooling in a programming language. Experience with **Go or Python** would be useful, with willingness to work in Go where needed.
- Experience working with engineers to deliver practical security improvements into production systems.
- Good communication and documentation skills.
**Desirable**
- Terraform or other Infrastructure as Code experience.
- Experience with AWS, GCP or other public cloud platforms.
- Security automation or policy-as-code experience.
- Experience with container/runtime isolation or sandboxing.
- Experience securing AI agents or other AI-enabled engineering tools.
- Experience using LLMs for security analysis or automation.
- Threat modelling experience.
- Knowledge of mTLS, PKI, cryptography or key management.
- Experience in regulated, financial or other business-critical environments.
**TECH STACK** ⚙️
- **Go / Python** - security tooling and automation
- **CI/CD** - secure builds, automated security checks and engineering workflows
- **Kubernetes** - containerised workloads and runtime security
- **Terraform** - Infrastructure as Code and security automation
- **AWS / GCP** - cloud infrastructure
- **IAM / RBAC** - least privilege and privileged access controls
- **Software supply chain security** - scanning, provenance, signing, SBOMs and integrity controls
- **Security policy and automation** - policy enforcement, guardrails and automated controls
- **AI security** - secure agent execution, AI-assisted analysis and engineering controls
**INTERVIEW PROCESS** ✍️
**Stage 1:** Screening Call with Talent Team
**Stage 2:** Platform Security & Secure Engineering Practices interview
We always aim to stick to the above process, however there may be occasions when an additional interview stage is needed for us to be sure we’re hiring the right fit for the role.
**HIRING LOCATIONS📍**
Here are the locations that we are looking to engage with contractors from. Please note, we are not looking to engage with contractors outside of these locations.
- Austria
- Bulgaria
- Croatia
- Cyprus
- Denmark
- Estonia
- Finland
- Greece
- Hungary
- Italy
- Latvia
- Lithuania
- Malta
- Norway
- Romania
- Slovakia
- Slovenia
All contractors start their first day in our office to collect the equipment needed to work remotely.
**ABOUT FORM3 💭**
Revolutionising the world of payments with our cloud-native, multi-cloud platform. For more information about Form3, check out the following pages:
[What we do](https://www.form3.tech/platform) | [Life at Form3](https://www.form3.tech/culture) | [Payments Cannot Fail Series](https://www.youtube.com/@Form3Cloud/podcasts) | [.Tech Podcast](https://techpodcast.form3.tech/episodes)
**OUR DEI&B COMMITMENT**
We hire talented people from a variety of backgrounds and experiences and are committed to a work environment based on diversity, open-mindedness and curiosity. We’re united by our company values (we even created them together!) and we celebrate our unique differences.
Our employee lifecycle processes are designed to embrace equal opportunity and prevent discrimination against our people regardless of personal characteristics. It is our strong belief that the more inclusive and belonging we are as a business, the better our work will be.
As an inclusive employer, we guarantee to interview all neurodiverse and physically disabled applicants who meet the minimum criteria for this role. We also encourage candidates to notify us of any reasonable adjustments that may be required during the recruitment process. This includes providing job adverts in alternative, accessible formats or adjustments required at interview stage.
If you consider yourself to be neurodiverse or physically disabled under the UN definition of disability and would like to be considered under this scheme and/or require any reasonable adjustments please let us know by sending an email to [careers@form3.tech](mailto:careers@form3.tech) clearly stating your consent for us to process this data.
For more information please refer to our [Recruitment Data Policy](https://www.form3.tech/legal/recruitment-data-policy).