Job Description:
Overview:
We don’t simply hire employees. We invest in them. When you work at Chatham, we empower you — offering professional development opportunities to help you grow in your career, no matter if you've been here for five months or 15 years. Chatham has worked hard to create a distinct work environment that values people, teamwork, integrity, and client service. You will have immediate opportunities to partner with talented subject matter experts, work on complex projects, and contribute to the value Chatham delivers every day.
We are seeking a Platform Security Engineer to evolve our security platform function within a growing financial risk and advisory SaaS business. This role is ideal for an engineer who thrives in a hands-on environment and is motivated to build, scale, and mature security capabilities in a cloud-native platform.
You will join a small but growing team, designing and implementing security controls across cloud infrastructure, applications, and CI/CD pipelines. You will play a critical role in strengthening our security posture, ensuring compliance with SOC 2 requirements, and enabling engineering teams to build securely at scale.
What You’ll Do
Design, build, and implement security controls across Azure-based cloud infrastructure, containerized environments, and .NET/Python/Javascript/React applications, all at the platform level for broad coverage
Ship security-focused capabilities and features that are highly leveraged across the development platform
Implement and mature cloud security and application security practices, including secure architecture patterns
Collaborate cross-functionally with Engineering, Compliance, and Information Security to embed security into the software development lifecycle (SDLC) by integrating security into CI/CD pipelines and developer workflows
Implement cloud security scanning and posture management, to prevent misconfigurations, vulnerabilities, and drift across Azure environments
Identify and address emerging risks related to AI/LLM usage across the SDLC
Evaluate, implement, and operate Platform tooling, with a focus on automation and scalability
Utilize AI to assist with all aspects of the engineering work: learning, investigations and debugging, creation and review of code
Document Platform standards for secure coding
What Success Looks Like (First 12 Months)
Reduced the burden of implementing secure coding for all Engineering teams
Collaborated effectively with adjacent teams such as Information Security, Engineering, Governance/Risk/Compliance and IT
Prioritized effectively operational work alongside project development
Implemented effective security controls via code within CI/CD pipelines and development workflows
Strengthened and matured cloud and application security practices across the organization
Maintained and improved robust policy scanning and vulnerability management practices
Automated and maintained audit control evidence to meet SOC 2 requirements
What You Bring
3+ years of experience in security engineering, with a strong foundation in software or cloud engineering
Experience building applications within the full Software Development Life Cycle (initial coding through production deployment and operations)
Experience integrating security into CI/CD pipelines and developer tooling
Hands-on expertise in cloud security (Azure required; AWS familiarity preferred)
Experience securing modern application stacks, including .NET applications and containerized environments
Strong understanding of application security principles, including secure coding practices, threat modeling, and common vulnerabilities (OWASP Top 10)
Strong problem-solving skills with the ability to operate tactically
Experience with security tooling such as SAST, DAST, container scanning, and cloud security posture management (CSPM)
Excellent collaboration and communication skills, particularly in working with engineering teams and Information Security
About Chatham…