Staff Platform Security Engineer (Security)

Responsibilities

• AWS Security
• Own and improve security across Phantom’s multi-account AWS environment, including IAM, Identity Center, networking, compute, storage, secrets, logging, and organization-level guardrails.
• Kubernetes Security: Secure production Kubernetes environments running on Amazon EKS, including cluster configuration, workload identity, RBAC, admission controls, network boundaries, secrets, container security, and tenant isolation.
• Identity and Access
• Design least-privilege access models for engineers, services, and automation.
• Build scoped, auditable, and time-bound access paths for sensitive production systems.
• Mission-Critical Systems: Protect the infrastructure supporting products and services that handle sensitive data and high-value operations.
• Cloud Security Architecture
• Lead security design for new infrastructure, platform services, and major architectural changes.
• Infrastructure and Policy as Code

Languages