Platform Security Engineer

• Own platform and application security for Coverflex's production cloud environment
• Bring security expertise to DevX, the team building the platform and paved road for engineers
• Build secure-by-default workflows for production operations with controlled, auditable access
• Shape security priorities, response targets, and automation in the delivery pipeline
• Lead resilience exercises and improve recovery playbooks
• Share wider DevX work across infrastructure, CI/CD, developer tooling and experience, observability, and incident troubleshooting
• Improve security posture and developer experience without slowing developer throughput or impacting platform users
• Deliver production-grade improvements using safe rollout patterns and tight feedback loops
• Increase production operations through secure, self-service, observable tooling
• Ensure security findings are caught early and resolved quickly through automation
• Maintain business continuity with clear recovery targets tested regularly
• Improve edge protection while maintaining a smooth user experience
• Drive adoption of security guardrails across engineering teams
• Collaborate with the Platform Engineering team and key stakeholders
• Participate in daily standups, weekly planning, and bi-weekly retrospectives

• Owned application or platform security in a production cloud environment, with clear examples of impact
• Strong cloud security fundamentals, including IAM and identity plumbing (SSO/OIDC), secrets management, and least privilege
• Strong platform engineering across infrastructure as code, CI/CD with security built in, and observability
• Strong experience running Kubernetes in production, including workload security and access controls
• Cloud networking and edge experience: VPC boundaries, DNS, TLS, load balancing, CDN and WAF tuning
• Reliability experience with SLOs, on-call, threat modelling, incident command, and postmortems
• Backup, restore and disaster recovery designed and actually exercised
• Treats the platform as a product; measures adoption and developer experience
• Uses AI tooling to accelerate engineering work and builds it into the platform (agents, MCP, assisted operations)
• Reads and writes code well enough to fix problems, not just report them
• Fluent English required
• Nice-to-have: ISO 27001, SOC 2 or DORA experience
• Nice-to-have: Fintech, payroll, or other regulated-data background
• Nice-to-have: Detection engineering or SIEM experience
• Nice-to-have: PostgreSQL operations and safe schema migrations
• Nice-to-have: Elixir or comfort picking up a functional language
• Nice-to-have: Cloud cost awareness and FinOps practices
• Certifications welcome, but practical evidence weighs more

• Equity: Stock Options under our Equity Incentive Plan
• All Coverflex benefits apply
• Fully remote setup with on-site get-togethers at least once a year
• Coverflex card
• MacBook
• €500 onboarding budget for workstation setup
• €1,000 yearly FlexBudget for professional development and remote work enablement
• Health Insurance plans, with the option to add family members and update conditions (depending on country)
• 25 paid vacation days per year
• 3 caring days per year to work on side projects supporting positive-impact causes
• 2 additional paid weeks on top of the legal maximum Parental Leave
• Employee's birthday and children's birthdays off