Phantom is a fully remote organization of around 180 people, backed by a $150M Series C investment from a16z, Sequoia Capital, and Paradigm. We are hiring a Staff Platform Security Engineer to join our team. This senior-level, hands-on role requires a Bachelor's degree and 7+ years of experience. While the company is remote, applicants for this position must be based in the US or Canada.
Key Responsibilities
- AWS Security: Own and improve security across Phantom’s multi-account AWS environment, including IAM, networking, storage, secrets, logging, and guardrails.
- Kubernetes Security: Secure production Kubernetes environments running on Amazon EKS, covering cluster configuration, workload identity, RBAC, and container security.
- Identity and Access: Design least-privilege access models and build scoped, auditable, and time-bound access paths for sensitive production systems.
- CI/CD & Supply Chain: Harden build, deployment, and release systems, including GitHub Actions, workload federation, dependencies, artifacts, and signing.
- Security Automation: Build tools that identify and remediate cloud and Kubernetes risks at scale, applying AI-assisted workflows to expand speed and depth.
Requirements
- Bachelor's degree.
- 7+ years of experience in platform security, cloud security, infrastructure security, security engineering, or a closely related role.
- Deep, hands-on experience securing production AWS environments.
- Comfort working in production systems, writing code and infrastructure, and collaborating directly with engineering and SRE teams.
Salary specifics are not provided in the source listing.