Senior Platform Security Engineer

This is a remote position

Join one of the Philippines fastest-growing tech companies! Open to Philippine-based candidates only.

About Us

Full Scale is a fully remote-first company that helps businesses build dedicated teams of skilled software engineers. We make it easier for growing companies to find, onboard, and retain high-performing software talent.

About the Role

We're looking for a Senior Platform Security Engineer to take ownership of technical security for a growing US-based healthcare SaaS company. The company provides a cloud-based medical imaging platform used by more than 3,000 healthcare practices. As the platform and engineering team continue to grow, you'll take the lead in building, strengthening, and maintaining its security architecture.

This is a hands-on senior individual contributor role. You'll work closely with engineering and leadership, independently identify security risks, design solutions, and drive security improvements across the platform. You'll also serve as the company's main technical security contact for customers, partners, and auditors.

What You'll Do

• Own security strategy and architecture: Assess the existing environment, identify risks, develop a prioritized security roadmap, and lead its implementation.
• Secure cloud infrastructure: Design and maintain security controls across cloud services (Azure preferred), AKS/Kubernetes, networking, databases, storage, WAF, and API gateways.
• Improve application and API security: Work with developers on secure application design, authentication, authorization, API protection, and tenant isolation.
• Lead secure development practices: Integrate security throughout the software development lifecycle, including threat modeling, design reviews, testing, validation, and release reviews.
• Manage vulnerabilities and access: Oversee vulnerability assessments, remediation priorities, identity and access management, privileged access, and least-privilege controls.
• Lead security monitoring and incident response: Develop detection and monitoring capabilities, investigate security incidents, and coordinate response and containment.
• Secure third-party integrations: Review partner connections, manage vendor access, and address security risks involving external systems.
• Represent technical security: Work with customers, partners, auditors, and internal teams on security reviews and technical discussions.
• Support security compliance: Collaborate with the compliance team on implementing and validating controls for HIPAA, SOC 2, and ISO 27001.

Requirements

• At least 6 years of experience in infrastructure or security, with strong hands-on experience in security engineering.
• Recent experience as a Senior, Staff, Lead, or Principal Security Engineer, Cloud Security Engineer, Platform Security Engineer, or similar role.
• Proven experience designing and implementing cloud security architecture. Azure is preferred, but strong hands-on AWS security experience is also acceptable.
• Experience independently owning security initiatives, identifying risks, designing solutions, and driving implementation without relying on a separate security architect.
• Strong hands-on knowledge of:
• Cloud Security: Azure security (Entra ID, RBAC, PIM, Key Vault, Defender for Cloud, Sentinel, managed identities, and private endpoints) or AWS security services and best practices.
• Kubernetes and AKS Security: Workload identity, Kubernetes RBAC, secrets management, network policies, ingress security, workload isolation, and runtime protection.
• Application and API Security: Authentication, authorization, BOLA/IDOR vulnerabilities, API protection, and multi-tenant security.
• Security Tools and Practices: SAST, DAST, dependency and container scanning, secrets detection, vulnerability management, and CI/CD security.
• Network and Infrastructure Security: WAF, firewalls, network segmentation, zero-trust principles, and infrastructure as code using Terraform, Bicep, or ARM.
• Monitoring and Incident Response: SIEM, cloud audit logs, security alerts, investigation, containment, and credential management.
• Experience working directly with software engineers to implement and validate security controls.
• Strong communication skills, with the ability to explain security risks, influence technical decisions, and confidently engage with leadership, customers, partners, and auditors.
• Comfortable remaining hands-on and personally designing, configuring, testing, and validating security solutions.

Why join us:

• 100% remote work setup
• Work from anywhere in the Philippines
• Direct visibility and collaboration with the
• High-impact role with significant technical ownership and autonomy
• Opportunity to work on a cloud-native healthcare/SaMD platform
• Exposure to modern Azure, AKS, Kubernetes, and cloud security technologies
• Opportunity to work in a regulated, high-assurance environment
• Collaboration with Engineering, Product, IT, Quality, and Compliance teams