Platform Security Engineer, NZ

Role Overview The Platform Security Engineer will own Partly’s security posture while contributing to platform reliability, reporting to the Platform Lead. Responsibilities Participate in on‑call rotation alongside the SRE team. Own security incident‑response planning and testing, lead post‑incident reviews, and participate in availability incidents. Build security event monitoring and alerting. Prepare for and pass security audits (ISO 27001, future SOC 2) and maintain continuous compliance via Vanta. Respond to enterprise customer security questionnaires and communicate the risk register to engineering and leadership. Implement the principle of least privilege across the stack – PostgreSQL roles, Kubernetes RBAC refinement, and secret access control. Drive network segmentation and zero‑trust progress using Cilium network policies and Kyverno admission policies; make production access read‑only by default for developers. Operate a vulnerability scanning pipeline using Trivy, Renovate, and Falco; manage vulnerability triage, severity assessment, prioritization, tracking to resolution, and remediation coordination. Qualifications 5+ years in security engineering, platform engineering, or SRE with a strong security focus. Hands‑on Kubernetes security experience – RBAC, network policies, admission controllers in production environments. Experience with ISO27001, SOC2, or PCI‑DSS compliance frameworks. Strong cloud security principles; GCP experience preferred. Infrastructure‑as‑code expertise – Terraform, ArgoCD, GitOps workflows. Clear communicator – able to translate technical vulnerabilities into business risk. Bonus: CNCF security tooling (Cilium, Kyverno, Falco) and container or supply‑chain security practices. Bonus: Rust or Go experience. Benefits Healthy, catered lunches in Auckland, Christchurch, London, and San Francisco offices. $1,500 annual wellness allowance (or local equivalent) for gym memberships, physical therapy, and other health‑related expenses. Primary caregivers receive three months of fully paid parental leave and a flexible return‑to‑work schedule. Paid 24/7 car park or commute allowance for commuters to a Partly office or co‑working space. Flex‑work policy with high‑trust environment. Quarterly season openers, weekly happy hours, monthly lunches, and an annual global offsite to celebrate team achievements. Generous relocation allowance for domestic or overseas relocation to Partly headquarters. #J-18808-Ljbffr