Senior Platform Engineer - Voi Technology

Senior Platform Engineer
Apply for this job

YOUR MISSION AT VOI
As Senior Platform Engineer, you'll own Voi's security toolchain end-to-end across the software delivery lifecycle. You'll join our Platform & Information Security team, working alongside platform engineers and security champions embedded across engineering, turning security from a checklist into a paved road that delivery teams actually want to use.

Our stack includes GCP, Golang, GitHub Actions, ArgoCD, Grafana, Prometheus, Mimir, and Jaeger. We're in the middle of rolling out GitHub Advanced Security as our core AppSec toolchain, and increasingly need to reason about risk in code that's partly or wholly AI-generated, both defensively (reviewing it) and offensively (AI-assisted attacks are already showing up in our bug bounty inbound).

This will include:

• Verifying and triaging SAST, secret scanning, and dependency alerts, tuning rules to cut false positives, and partnering with code owners to remediate findings across all repos
• Hardening our paved-road service template so secure defaults (secrets handling, authn middleware, observability, security-checks-pass merge gates) are the easy path, not an opt-in
• Building CI/CD security guardrails: signed builds, SBOM pipelines, deploy-time policy checks, provenance.
• Building and maintaining security KPI dashboards for engineering and leadership visibility
• Proactively reviewing and hardening infrastructure and application security including addressing risks in AI-generated code
• Evaluating and implementing AI capabilities to drive proactive and reactive response in a world where offensive AI capabilities are commonly available.
• Enabling our Security Champions with tooling and guidance, not just policy

WHAT YOU NEED TO EMBARK

• Fluency in a backend programming language (Go strongly preferred, given our stack)
• Solid understanding of application security fundamentals (OWASP Top 10, secure SDLC)
• Hands-on experience with AppSec tooling: SAST, SCA, or secrets scanning (GitHub Advanced Security, Snyk or similar)
• Experience with Kubernetes and cloud infrastructure (GKE/GCP or equivalent)
• A builder's instinct, you'd rather ship a guardrail than write a policy doc

Don’t meet every requirement? If you are excited about this role and our mission, and have relevant, transferable skills, we encourage you to apply - even if you don’t check every box.