Senior Security Platform Engineer - Secure Delivery

About this role

Build and operate secure-delivery capabilities used by engineers across production repositories. The role focuses on integrating security checks into CI/CD workflows, improving actionable feedback and self-service exceptions, and measuring coverage and reliability.

About the company

Ashby is a technology company that provides a recruitment platform designed to streamline the hiring process for businesses. They serve various sectors with a focus on enhancing talent acquisition and management through innovative engineering and support solutions.

The team

Security team, reporting to the Head of Security.

Stack

What you'll do

• Integrate and tune static analysis, dependency, secret, container, and infrastructure scanning in CI/CD workflows.
• Map production repositories and delivery paths, including prompts and model configuration, and make check ownership clear.
• Roll out warning, blocking, and self-service exception policies with documented criteria and audit trails.
• Build automation and AI-assisted workflows to enrich findings and propose fixes, preserving review and rollback controls.
• Track coverage, integration failures, finding age, remediation times, false blocks, build delays, and bypasses.
• Coordinate cloud-posture monitoring and bounded remediation automation with Infrastructure.
• Extend delivery foundations with shared-image hardening and artifact provenance.

What we're looking for

• Experience building and operating CI/CD, developer tooling, or infrastructure automation used by other engineers.
• Ability to write maintainable production automation in TypeScript, Python, Go, or a comparable language.
• Experience applying AI in engineering and checking its outputs and permissions.
• Ability to assess security evidence, explain failure modes, and make practical rollout decisions.
• Comfort with ambiguous problems, cross-functional collaboration, and owning shipped systems in operation.

Nice to have

• Experience with software supply-chain security and security scanners.
• Experience with GitHub Actions or comparable CI/CD systems, Terraform, containers, and cloud controls.

Benefits

• Competitive salary and equity.
• 10-year stock-option exercise window.
• Unlimited PTO, with encouragement to take it.
• At least 12 weeks of fully paid parental leave.
• Equipment, software, and office-furniture budget.
• $100 monthly education budget, with conferences and higher-cost items subject to manager approval.
• Fully covered supplemental health insurance for employees and dependents outside the US.

Hiring process

1. Recruiter screen (30 minutes)
2. Hiring manager intro call (20 minutes)
3. Past projects deep dive (45 minutes)
4. Founder screening (45 minutes)
5. Take-home assessment and practical assessment review (1 hour review; 2–3 hours for the assignment)
6. Cross-functional stakeholder interview (45 minutes)