Supabase - Platform Security Engineer

Remote - Anywhere+ Equity3w ago

Remote WW Cloud Computing Software Security Engineer Platform Engineer Kubernetes AWS Linux

Responsibilities

• Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure. • Identify • Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems. • Conduct • Partner closely with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns. • Partner • Improve Kubernetes and container security across areas like workload isolation, RBAC, admission control, secrets, network policy, and runtime hardening. • Improve • Assess container runtime and Linux isolation risks, including capabilities, seccomp/AppArmor, namespaces, cgroups, and container escape scenarios. • Assess • Strengthen AWS security posture across IAM, account boundaries, network controls, logging, detection, encryption, and service configuration. • Strengthen • Build scalable mechanisms such as automation, guardrails, paved paths, detection, secure defaults, and review frameworks. • Build • Distinguish between theoretical risk and material platform risk to prioritize security efforts effectively. • Distinguish • You Might Be a Good Fit If You • Have senior-level experience in platform security, cloud security, infrastructure security, container security, or security engineering. • platform security, cloud security, infrastructure security, container security, or security engineering • Have deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals. • AWS, Kubernetes, containers, and Linux security fundamentals • Have worked in large cloud environments, multi-cluster Kubernetes setups, developer platforms, SaaS platforms, or high-scale infrastructure teams. • large cloud environments • Can reason clearly about identity, networking, workload isolation, runtime security, secrets, supply chain, and blast radius. • identity, networking, workload isolation, runtime security, secrets, supply chain, and blast radius • Communicate clearly across both technical and non-technical audiences, especially in a written, asynchronous environment. • written, asynchronous environment • Are able to manage security efforts across complex projects with various stakeholders • complex projects • Are energized by solving real-world infrastructure security problems and navigating ambiguity while moving quickly. • solving real-world infrastructure security problems • Prefer building guardrails, automation, and secure defaults over creating unnecessary process or bottlenecks. • guardrails, automation, and secure defaults

Benefits

• Fully Remote • We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world. • Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together. • Tech Allowance • Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work. • Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us. • Annual Off-Sites • Annual Off-Sites • Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year. • Flexible Work • We operate asynchronously and trust you to manage your own time. You know what needs to be done and when. • Professional Development • Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth. • Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love. • ~400 team members • 20+ languages spoken • Over $1B raised (including our $500M Series F) • 540,000+ community members • We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.