Senior / Staff Platform Security Engineer

This is a remote position Join one of the Philippines' fastest-growing tech companies! Open to Philippine-based candidates only. About Us Full Scale is a fully remote-first company that helps businesses build dedicated teams of skilled software engineers. We make it easier for growing companies to find, onboard, and retain high-performing software talent. About the Role We are seeking a hands-on Senior / Staff Platform Security Engineer who can build, implement, and validate security controls across Azure, AKS/Kubernetes, identity, CI/CD, cloud networking, and production environments. This role is best suited to a security engineer who has personally built and improved production controls. Candidates whose experience is primarily compliance, audit, SOC monitoring, architecture advisory, or people management without implementation ownership will not be a strong fit. Requirements 6+ years of experience in cloud security, platform security, security engineering, infrastructure security, DevSecOps, SRE, DevOps, or related technical infrastructure roles. At least 4 years of security-focused experience in cloud, platform, application, DevSecOps, or production security engineering. Strong hands-on Azure security experience, including Entra ID, managed and workload identities, RBAC, PIM, Key Vault, Defender for Cloud, Sentinel or comparable tools, private networking, and least-privilege architecture. Strong AKS/Kubernetes and container-security experience, including Kubernetes RBAC, workload identity, secrets, network policies, ingress controls, admission and policy controls, runtime protection, and workload isolation. Practical experience implementing secure-SDLC controls: SAST, DAST, SCA/dependency scanning, secret scanning, IaC scanning, container scanning, vulnerability management, CVEs/CVSS, and CI/CD security gates. Experience securing software and container supply chains, including image scanning, registries, image provenance or signing, base-image and dependency vulnerabilities, and secure deployment controls. Strong network-security knowledge across WAFs, firewalls, segmentation, private endpoints, ingress and egress controls, attack-surface reduction, and zero-trust principles. Experience with security monitoring, detection, and incident response using SIEM telemetry, identity events, cloud audit logs, investigation, and containment workflows. Experience conducting threat modeling and security architecture reviews, and translating findings into a prioritized technical security roadmap. Strong infrastructure-as-code experience using Terraform, Bicep, ARM, or comparable tools, including policy and security automation. Strong communication skills and the ability to partner with engineering teams, explain security findings clearly, and drive remediation through completion. Must be hands-on at the keyboard and able to describe security controls personally configured or implemented, including the tools used, architecture decisions made, problems encountered, and how the control was validated. Preferred Qualifications Experience operating in a regulated or high-assurance environment and producing audit-ready technical evidence; HIPAA, SOC 2, ISO 27001, healthcare SaaS, fintech, or similar experience is valuable. Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Log Analytics, CrowdStrike, Aikido, Vanta, New Relic, or comparable security platforms. Experience with GitHub Actions, Azure DevOps, or comparable CI/CD platforms. Familiarity with SAML, OIDC, SCIM, SSO, MFA, Conditional Access, and privileged-access management. Experience in multi-tenant SaaS, .NET, Angular, or security automation using Python, Go, Bash, or PowerShell. Certifications such as Azure Security Engineer Associate, CKS, CCSP, or CISSP, paired with demonstrated implementation experience. Benefits Why join us: 100% remote work setup Work from anywhere in the Philippines Direct visibility and collaboration with the High-impact role with significant technical ownership and autonomy Opportunity to work on a cloud-native healthcare/SaMD platform Exposure to modern Azure, AKS, Kubernetes, and cloud security technologies Opportunity to work in a regulated, high-assurance environment Collaboration with Engineering, Product, IT, Quality, and Compliance teams