Staff Platform Security Engineer, Phantom

• 7+ years of experience in platform security, cloud security, infrastructure security, security engineering, or a closely related engineering role
• Deep, hands-on experience securing production AWS environments. You understand IAM and resource policies, workload identity, network security, secrets management, logging, organization-level controls, and the ways these systems fail in practice
• Deep experience securing Kubernetes in production, preferably Amazon EKS, including RBAC, workload identity, admission policy, network policy, pod security, secrets, and cluster hardening
• Experience designing or securing mission-critical systems where compromise, excessive privilege, or loss of availability could have significant customer or business impact
• Strong understanding of identity, authorization, least privilege, isolation, and blast-radius reduction across both human and machine access
• Experience securing CI/CD and software supply chains, including GitHub Actions or similar systems, build runners, workload federation, artifacts, and production deployment paths
• Experience writing and reviewing infrastructure as code using Pulumi, Terraform, CloudFormation, or similar tools
• Ability to write production-quality code or automation in a language such as TypeScript, Python, Go, or Rust
• High agency and ownership. You can take an ambiguous platform-security problem from initial investigation through implementation and verified remediation
• Clear communication and a strong track record of partnering with infrastructure and engineering teams while maintaining a high security bar

Desirable

• Platform security is foundational to protecting Phantom and the systems our users rely on
• We’re hiring a Senior Platform Security Engineer to own and improve security across our AWS and Kubernetes environments
• You’ll work directly with infrastructure and engineering teams to secure the control planes, identities, workloads, and deployment systems behind our most critical products
• We’re building an AI-native security team that aggressively uses AI to expand the speed, depth, and reach of our work
• We’re looking for a strong security engineer with high agency who can identify the risks that matter, build practical controls, and own problems through verified remediation
• This is a hands-on role for someone who is comfortable working in production systems, writing code and infrastructure, responding to incidents, and making security improvements without slowing down the teams building on the platform
• Phantom is built by a team of experienced product and engineering leaders working to make crypto-powered finance safer and easier to use. Our platform supports products used by tens of millions of people, making infrastructure security both technically challenging and directly consequential
• Secure AWS and Kubernetes systems supporting products used by millions of people
• Work on high-impact problems spanning cloud identity, production access, workload isolation, software supply chains, and mission-critical infrastructure
• Build controls directly in the platform rather than operating as an advisory or review-only security function
• Influence architecture early and own improvements through implementation and production verification
• Help shape an AI-native security team with a strong engineering and automation culture