About the roleThe Internal Platform is a pivotal foundation that accelerates product development by providing a reliable, scalable, and self-service ecosystem. It supports the entire software lifecycle and is meticulously tailored to meet the organization’s technological needs and strategic direction.The platform enables development teams to operate autonomously in 80% of cases, reducing dependency on the Internal Platform team, and ensuring that compliance, security, and business continuity are integrated across the entire platform—defending general reliability of services, and data integrity.Overall, a platform engineering team plays a critical role in ensuring a company's technology infrastructure is reliable and scalable.The Internal Platform team consists of 34 people including 27 individual contributors (2 Staff Engineers, 4 Engineering Managers) and the Head of Internal Platform. The team is organized to efficiently address stakeholders needs.What are the challenges in the team?Platform Security is a team within the Internal Platform. The team is a first point of contact for the Global Security Team and is responsible for security and integrity of the underlying infrastructure that supports the organization, safeguarding the platform from potential vulnerabilities, threats, and attacks.Developing and maintaining tools for Global Security to deliver vulnerability management platforms for application triaging and continuous compliance.The complexity of the Docplanner organization: a complex setup with multiple teams working on various products and services; one of the main challenges is understanding and integrating the diverse technology stacks used by different teams.Scalability and reliability of systems: as Docplanner grows and expands, the demand for the technology infrastructure increases; the platform engineering team must ensure systems are designed to handle high traffic, are scalable, and secure.Who will you work closely with?Global Security – the main external stakeholder for security initiatives; collaboration on platform compliance, risk management, and acting as a technical point of contact during escalated incidents such as DDoS or abuse cases.PMS (Practice Management Systems) teams – to audit existing systems, support secure migration to the central platform, and interpret global security and legal requirements in the context of PMS implementations.Core Team within Internal Platform – consulting on technical compliance, networking standards, and resolving misconfigurations or vulnerabilities detected across platform components.Experience Teams – providing guidance on infrastructure-related application security topics, secure encryption practices, and collaborating on secure CSP integrations.Legal – ensuring alignment with data protection regulations, encryption standards, and locality requirements; using insights to assess and improve the security posture of the platform.How would you be impacting our mission?Making sure that the platform is compliant with best industry practices and security standards (ISO27001, C5, SOC2).Introducing security on every step of the platform lifecycle.Vigilantly understanding and mitigating security threats before they arise.Optimizing system scalability and cost efficiency.Development, monitoring, and maintenance of Kubernetes clusters on several continents.CI/CD development and maintenance.Ensuring services are deployed in a highly available way.Fixing urgent issues and optimizing performance.Supporting other team members in their daily work.QualificationsWhat will help you thrive?At least 5 years of experience related with security.Vast experience with container orchestration platforms like Kubernetes and how to secure them (must-have).Ability to maintain/develop policy for security-focused CNI/Service Mesh (e.g., Calico, Cilium).Ability to scan for and manage vulnerabilities at scale.Experience with Hashicorp Vault.Understanding of why/how to use Terraform and popular CI/CD tools.Knowledge about building scalable and secure production HA environments using AWS.Knowledge around network security services (e.g., AWS WAF/Cloudflare).Not afraid of developing tools or scripts in Bash or Go to automate work.Ability to communicate in English (spoken and written - minimum B2 level).Ability to bring people on your side when discussing security and best practices.Let’s talk moneyA salary adequate to experience and skills.Flexible remuneration and benefits system via Flexoh, including restaurant card, transportation card, kindergarten, and training tax savings.True flexibility and work-life balanceRemote or hybrid work model with a hub in Barcelona.Flexible working hours (fully flexible; in most cases you only have to be on a couple of meetings weekly).Summer intensive schedule during July and August (work 7 hours, finish earlier).23 paid holidays, with exchangeable local bank holidays.Additional paid holiday on your birthday or work anniversary (you choose what to celebrate).Health comes firstPrivate healthcare plan with Adeslas for you and subsidized for your family (medical and dental).Access to hundreds of gyms for a symbolic fee in partnership for you and your family with Andjoy.Access to iFeel, a technological platform for mental wellness offering online psychological support and counseling.Keep growing with usFree English and Spanish classes.

Senior Platform Security Engineer (100% Remote Within Spain)

Emma

Requirements and responsibilities

Skills wanted:

Language(s) required:

Lucek Samulowski

Carlos

Mariusz

Grzegorz Krysiak

About Docplanner:

www.docplanner.com/

Admin access needed

Payment confirmed

A member of the Torre team will contact you shortly