Senior Platform Security Engineer / DevOps

Fourthwall is where online creators (YouTubers, streamers, podcasters and other independent brands) run shops, merchandise, donations and memberships. More than 500,000 creators use it. The platform you would co-own is the one that runs their businesses.

• Owned and managed a production cloud platform at a senior level, including handling failures and recovery.
• Hands-on security engineering experience including platform hardening, vulnerability management, security incident handling, or operating a VDP or bug bounty.
• Experience with Terraform and GitOps in production; familiarity with Flux.
• Deep knowledge of Kubernetes security features such as RBAC, network policy, workload identity, and admission control.
• Understanding of cloud IAM, OAuth, OIDC, service-to-service identity (mTLS or workload identity), and short-lived credentials.
• Application security knowledge sufficient to evaluate and triage VDP reports, with familiarity of OWASP Top 10.
• Experience with security checks in CI/CD pipelines, including secret, dependency, image, or IaC scanning.
• Proficient use of AI tools like Codex or Claude in daily work and accountable for their outputs.
• Ability to write automation in a general-purpose language or shell and review code.
• Proficient English communication skills, both written and spoken.

• Co-own the platform: GCP and GKE, networking, IAM, secrets, GitOps, CI/CD, observability, and PostgreSQL.
• Manage the platform-security backlog including privilege reduction, credential management, workload identity, and infrastructure vulnerability tracking.
• Develop guardrails: platform configuration and policies to prevent leaks and misconfiguration, alerting, and automated scanning (secrets, dependencies, images, Terraform, code) including AI-based security review.
• Run the Vulnerability Disclosure Programme (VDP): intake, validation, severity assessment, routing, communication, tracking fixes, and disclosure.
• Lead recovery efforts: recovery objectives, restore, failover, access exercises, runbooks, alert quality, and postmortems.
• Implement AI and automation in operations, improving on-call alerting and automation of responses.
• Provide fast security advice on risky designs and changes and transform recurrent questions into guardrails or defaults.

The controller of your personal data is Fourthwall, Inc. The data is processed for recruitment purposes based on the Labour Code and GDPR provisions. Providing mandatory data is obligatory; additional data provision is voluntary. Data retention lasts the recruitment process plus limitation periods or up to 24 months if consent for future recruitment is given. Candidates have rights regarding their personal data and may withdraw consent at any time without affecting prior processing.