Role Overview

The Platform Security Engineer will own Partly’s security posture while contributing to platform reliability, reporting to the Platform Lead.

Responsibilities

• Participate in on‑call rotation alongside the SRE team.
• Own security incident‑response planning and testing, lead post‑incident reviews, and participate in availability incidents.
• Build security event monitoring and alerting.
• Prepare for and pass security audits (ISO 27001, future SOC 2) and maintain continuous compliance via Vanta.
• Respond to enterprise customer security questionnaires and communicate the risk register to engineering and leadership.
• Implement the principle of least privilege across the stack – PostgreSQL roles, Kubernetes RBAC refinement, and secret access control.
• Drive network segmentation and zero‑trust progress using Cilium network policies and Kyverno admission policies; make production access read‑only b...