This is a remote position
Join one of the Philippines' fastest-growing tech companies! Open to Philippine-based candidates only.
About Us
Full Scale is a fully remote-first company that helps businesses build dedicated teams of skilled software engineers. We make it easier for growing companies to find, onboard, and retain high-performing software talent.
About the Role
We are seeking a hands-on Senior / Staff Platform Security Engineer who can build, implement, and validate security controls across Azure, AKS/Kubernetes, identity, CI/CD, cloud networking, and production environments.
This role is best suited to a security engineer who has personally built and improved production controls. Candidates whose experience is primarily compliance, audit, SOC monitoring, architecture advisory, or people management without implementation ownership will not be a strong fit.
Requirements
- 6+ years of experience in cloud security, platform security, security engineering, infrastructure security, DevSecOps, SRE, DevOps, or related technical infrastructure roles.
- At least 4 years of security-focused experience in cloud, platform, application, DevSecOps, or production security engineering.
- Strong hands-on Azure security experience, including Entra ID, managed and workload identities, RBAC, PIM, Key Vault, Defender for Cloud, Sentinel or comparable tools, private networking, and least-privilege architecture.
- Strong AKS/Kubernetes and container-security experience, including Kubernetes RBAC, workload identity, secrets, network policies, ingress controls, admission and policy controls, runtime protection, and workload isolation.
- Practical experience implementing secure-SDLC controls: SAST, DAST, SCA/dependency scanning, secret scanning, IaC scanning, container scanning, vulnerability management, CVEs/CVSS, and CI/CD security gates.
- Experience securing software and container supply chains, including image scanning, registries, image provenance or signing, base-image and dependency vulnerabilities, and secure deployment controls.
- Strong network-security knowledge across WAFs, firewalls, segmentation, private endpoints, ingress and egress controls, attack-surface reduction, and zero-trust principles.
- Experience with security monitoring, detection, and incident response using SIEM telemetry, identity events, cloud audit logs, investigation, and containment workflows.
- Experience conducting threat modeling and security architecture reviews, and translating findings into a prioritized technical security roadmap.
- Strong infrastructure-as-code experience using Terraform, Bicep, ARM, or comparable tools, including policy and security automation.
- Strong communication skills and the ability to partner with engineering teams, explain security findings clearly, and drive remediation through completion.
- Must be hands-on at the keyboard and able to describe security controls personally configured or implemented, including the tools used, architecture decisions made, problems encountered, and how the control was validated.
Preferred Qualifications
- Experience operating in a regulated or high-assurance environment and producing audit-ready technical evidence; HIPAA, SOC 2, ISO 27001, healthcare SaaS, fintech, or similar experience is valuable.
- Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Log Analytics, CrowdStrike, Aikido, Vanta, New Relic, or comparable security platforms.
- Experience with GitHub Actions, Azure DevOps, or comparable CI/CD platforms.
- Familiarity with SAML, OIDC, SCIM, SSO, MFA, Conditional Access, and privileged-access management.
- Experience in multi-tenant SaaS, .NET, Angular, or security automation using Python, Go, Bash, or PowerShell.
- Certifications such as Azure Security Engineer Associate, CKS, CCSP, or CISSP, paired with demonstrated implementation experience.
Benefits
Why join us:
- 100% remote work setup
- Work from anywhere in the Philippines
- Direct visibility and collaboration with the
- High-impact role with significant technical ownership and autonomy
- Opportunity to work on a cloud-native healthcare/SaMD platform
- Exposure to modern Azure, AKS, Kubernetes, and cloud security technologies
- Opportunity to work in a regulated, high-assurance environment
- Collaboration with Engineering, Product, IT, Quality, and Compliance teams