Platform Security Engineer – Christchurch

About the role

The Platform Security Engineer will own Partly’s security posture while ensuring platform reliability. Reporting to the Platform Lead, you will be the first dedicated security hire, building processes from scratch and working closely with the SRE team.

Key responsibilities

• Participate in on‑call rotation, lead security incident response planning and testing.
• Prepare for and pass security audits (ISO 27001, future SOC 2) and maintain continuous compliance via Vanta.
• Implement least‑privilege controls across PostgreSQL, Kubernetes RBAC, and secret management.
• Drive network segmentation and zero‑trust policies using Cilium and Kyverno.
• Operate vulnerability scanning pipeline with Trivy, Renovate, and Falco, and manage triage and remediation.

Required profile

• 5+ years in security engineering, platform engineering, or SRE with a strong security focus.
• Hands‑on experience securing production Kubernetes environments.
• Familiarity with compliance frameworks such as ISO 27001, SOC 2 or PCI‑DSS.
• Strong communication skills to translate technical risk for non‑technical stakeholders.

Required skills

• Kubernetes (RBAC, network policies, admission controllers)
• Cilium, Kyverno, Falco
• PostgreSQL role management
• Terraform, ArgoCD, GitOps workflows
• GCP cloud security principles
• Vanta compliance platform
• Trivy and Renovate for vulnerability scanning

What we offer

• Healthy catered lunches at all offices and a $1,500 annual wellness allowance.
• Three months fully paid parental leave for primary caregivers.
• Generous relocation assistance and paid 24/7 parking or commuting allowance.
• Office‑first environment with flexibility to manage your own schedule.
• Regular team celebrations, quarterly “Season Openers” and an annual global off‑site.