Platform Security Engineer

About the Company

At Future Secure AI, we're building something genuinely new — and we're looking for people bold enough to build it with us. We work at the frontier of AI, tackling big, real-world problems for global enterprises across multiple industries, armed with state-of-the-art technology and a culture that prizes courage, rigor, and relentless curiosity. Our BRAVER values aren't just words on a wall — they describe the kind of people we are and the standard we hold ourselves to every day. Our leadership team is entrepreneurial, experienced, and accessible, with an open-door policy that means you'll never be just a number here. We invest seriously in your growth because we know our success depends on yours. If you're ready to work alongside some of the brightest minds in the industry, push into uncharted territory, and do work that genuinely matters, Future Secure AI is the place for you.

About the Role

We are hiring a Platform Security Engineer to own the security of how we build and ship software: the product and its AI systems, the cloud it runs on, and the supply chain and CI/CD that get it there. This is a hands-on engineering role, not an advisory one. You'll work alongside our platform engineer and partner directly with product and platform engineering to design security in early and build the guardrails that make secure the default. Security is core to the product and the company, and we are engineering-led: we buy managed protection where it makes sense and spend headcount on engineers who automate and extend the stack. You'll be one of the first hires on this team, owning a domain rather than a slice of someone else's.

Responsibilities

• Run security design reviews, threat models, and code reviews for new features and AI/agentic systems, designing out vulnerability classes rather than chasing them one at a time
• Help scope and act on penetration tests against the product
• Design and build security controls for our AWS and Kubernetes (EKS) environment, including IaC guardrails (e.g., Terraform), secrets management (e.g., HashiCorp Vault), and tooling to detect and prevent cloud misconfiguration
• Harden the path from commit to production, including source and pipeline security (e.g., GitHub Enterprise, Actions and self-hosted runners) and the artifact and build chain
• Build security tooling and workflows that integrate into the IDE and pipeline so engineers make secure decisions quickly
• Stand up and run dependency and SCA controls and a dependency firewall (e.g., Socket, Snyk) and artifact management (e.g., JFrog Artifactory)
• Drive SBOM, code signing, and admission control (e.g., Cosign, Kyverno)
• Drive secure-development practices and AI-assisted-development governance across engineering
• Participate in the shared incident-response and on-call rotation as an incident handler, with leadership-level incident command for major incidents

Minimum Qualifications

• 5 years in product/application security or security-focused software engineering
• Proficiency in at least one general-purpose language (e.g., Python, Go, TypeScript) and a real build-vs-buy mindset
• Hands-on experience securing modern cloud environments (AWS) and containerized/microservice architectures (Kubernetes)
• Working knowledge of SDLC security: threat modeling, code review, and CI/CD pipeline security
• Ability to translate security requirements into developer-friendly workflows and influence engineering teams you don't own

Preferred Qualifications

• Experience securing AI/ML systems, LLM applications, or agentic AI
• IaC security (Terraform, CDK, CloudFormation) and security automation
• Supply-chain security depth (SLSA, sigstore/Cosign, dependency firewalls)
• Bug bounty or offensive-security experience

Why Join Us?

• A high-performance culture
• State-of-the-art technology
• Experience world-class leadership
• Scale of impact and purpose
• A competitive salary and a huge growth trajectory
• Work with the best in the industry
• Flexible work environment
• Diversity and creativity

Disclaimer: We do not wish to be contacted by recruitment agencies. Our hiring process is managed in-house and the best way for candidates to express interest is by applying with your resume through our company website.

At Future Secure AI, we are committed to protecting your privacy and adhering to the principles of the General Data Protection Regulation (GDPR) and the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Our Privacy Policy outlines how we collect, use, share, and protect your personal data when you visit our website at www.futuresecure.ai (the "Website") and use our services.