Senior Staff Platform Security Engineer - Remote

Overview

Fivetran is building data pipelines to power the modern data stack for thousands of companies. We’re looking for a highly motivated and skilled Senior Staff Platform Security Engineer to join our Security team. This individual contributor (IC) role is hands-on and execution-focused, requiring expertise in application security, cloud security, and DevSecOps.

In Short

• Architect and implement security solutions that protect cloud-native and hybrid infrastructure.
• Partner with engineering teams to integrate security tooling into the SDLC, enabling seamless DevSecOps adoption.
• Conduct security architecture reviews, threat modeling, and risk assessments to identify and mitigate vulnerabilities.
• Automate security processes by developing integrations and security checks for machine configurations, container images, IAM policies, firewall rules, and cloud storage policies.
• Perform security design reviews for enterprise applications, ensuring compliance with security best practices and industry standards.
• Apply and enhance security assessment tools and processes, including penetration testing, vulnerability scanning, SIEM, DLP, and EDR.
• Lead threat modeling efforts to operationalize and automate security across system and software development lifecycles.
• Collaborate with internal engineering teams to tackle security challenges across the stack while fostering a security-first culture.
• Stay up to date with cybersecurity threats, trends, and industry standards to ensure Fivetran remains resilient against emerging risks.

Requirements

• Proven experience securing cloud-native applications in AWS, GCP, or Azure.
• Deep expertise in cloud security, containerization (Docker, Kubernetes), and securing cloud deployments.
• Strong software development and scripting skills (Python, Go, Bash, HCL).
• Solid understanding of security best practices across the Software Development Life Cycle (SDLC).
• Experience automating security infrastructure using Terraform, Ansible, or other Infrastructure-as-Code (IaC) tools.
• Strong problem-solving and analytical skills, with the ability to work autonomously in a fast-paced environment.
• Proficiency in network security, endpoint security, application security, and cloud security fundamentals.
• Ability to communicate complex security concepts effectively to both technical and non-technical stakeholders.
• Familiarity with modern attack techniques, offensive security methodologies, and defense strategies.

Benefits

• 100% employer-paid medical insurance.
• Generous paid time-off policy (PTO), plus paid sick time, inclusive parental leave policy, holidays, and volunteer days off.
• RSU stock grants.
• Professional development and training opportunities.
• Company virtual happy hours, free food, and fun team-building activities.
• Monthly cell phone stipend.
• Access to an innovative mental health support platform that offers personalized care and resources.