{"id":2034168,"url":"https://alion.io/job/equinox-senior-security-platform-engineer","title":"Senior Security Platform Engineer","company":{"id":3662,"name":"Equinox","domain":"equinox.com","url":"https://alion.io/company/equinox","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":67,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":145000,"max":175000,"currency":"USD","period":"year","gross":null,"usd_annual":175000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon ECS","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DNS","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"Flask","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"IAM","optional":false},{"name":"Java","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Node JS","optional":false},{"name":"Okta","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"React Native","optional":false},{"name":"SIEM","optional":false},{"name":"Slack","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Spring Boot","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false},{"name":"Gradle","optional":true},{"name":"JavaScript","optional":true},{"name":"Maven","optional":true},{"name":"npm","optional":true},{"name":"React.js","optional":true}],"status":"live","first_seen_at":"2026-10-07T13:37:48Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-12T13:09:53Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"WHO WE ARE\nEquinox is a category of one, setting the global standard for luxury health, wellness, and hospitality. Our spaces are intentionally elevated, our standards uncompromising, and our expectations high. We attract people who take pride in excellence, care deeply about quality, and want to be part of something that feels different the moment you walk through the door.\nWe are builders, operators, and innovators who believe great environments and meaningful human connection change lives. Diversity, belonging, and ownership aren’t slogans here, they’re how we work. At Equinox, colleagues don’t just support the business; they shape the future of wellness. Because for us, it’s not fitness. It’s life.\n WHAT WE DO\nWe create premium, immersive experiences where performance, hospitality, design, and human connection converge-and every detail matters. This is not a traditional fitness environment. It is a place where high standards, accountability, and pride in craft define the work.\nFueled by an entrepreneurial mindset, we trust our people with real responsibility and real impact. Growth is earned through action, learning is hands-on, and careers are built by those who want to operate at the highest level. At Equinox, we don’t just offer opportunities-we offer long-term pathways for people who want to do meaningful work in an environment that expects more and delivers more.\n We are looking for a senior engineer who can operate at the intersection of cloud infrastructure, platform engineering, and security operations. This is a hybrid role for an engineer who is equally comfortable debugging a Terraform module, tuning a SIEM detection rule, and leading an incident response investigation. You'll be a primary technical escalation point for both platform reliability and security incidents across all cloud environments.\nWhat You'll Do\nCloud Infrastructure & Platform Engineering\nOwn and maintain infrastructure-as-code across (e.g., Terraform) cloud providers, including shared modules used by application teams org-wide\n\nManage IAM users, keys, and secrets lifecycle (rotation, storage in Parameter Store/Secrets Manager, cross-environment consistency)\n\nDiagnose and resolve production networking and infrastructure issues: load balancer health checks, security groups, WAF rules, CDN and origin access, DNS, and container orchestration\n\nAdminister access across supported platforms (e.g., AWS, GCP, GitHub, etc.) and internal developer tooling\n\nEvaluate and integrate third-party platform/security tooling (e.g., CSPM, code security scanners)\n\nSupport CI/CD pipelines and troubleshoot build/deploy failures\n\nSIEM & Detection Engineering\nOwn and operate the organization's Elastic Security (SIEM) platform end-to-end: cluster upgrades, agent/integration management, and log ingestion pipelines (cloud audit logs, identity provider logs, payment/fraud logs, WAF logs)\n\nDesign, build, and tune detection rules and alerting workflows, including integrating SIEM alerts into team communication channels (e.g., Slack)\n\nContinuously improve signal quality by resolving log parsing errors, refining index patterns, and reducing false positives\n\nMaintain technical documentation for logging architecture and detection rule logic\n\nSecurity Operations & Incident Response\nProvide technical leadership and day-to-day oversight for the SOC team, including prioritization, escalations, investigation quality and mentoring\n\nServe as a senior escalation point for the SOC, guiding and mentoring analysts through investigations\n\nLead investigations into anomalous authentication activity, account compromise, and suspicious network traffic, including coordinating remediation (session revocation, credential resets, user outreach)\n\nDevelop and maintain incident response runbooks and reference documentation\n\nBuild and maintain WAF-based detection and mitigation capabilities (e.g., fingerprint- and IP-based blocking of malicious/fraudulent traffic)\n\nIdentity, Access & Compliance\nDrive identity governance initiatives, including cloud identity reconciliation (e.g., managed vs. unmanaged accounts) and license/access audits\n\nDesign and implement authentication hardening measures: conditional access policies, MFA/authentication strength requirements, and legacy protocol deprecation (e.g., legacy SMTP auth)\n\nPartner with IT/security leadership on identity provider strategy and vendor licensing decisions\n\nApplication, AI & Code Ownership\nHold end-to-end security ownership across the organization's core application stack, spanning front-end (React Native, React Web), back-end (Node.js, Spring Boot/Java, Python/Flask), and AI/ML systems\n\nReview code and architecture for security vulnerabilities (e.g., dependency/supply-chain risk, secrets handling, authN/authZ flaws, insecure API design) across mobile, web, and service layers\n\nPartner with application engineering teams to embed security requirements into the SDLC - secure coding standards, PR review gates, and CI/CD security scanning (SAST/SCA/secrets detection)\n\nTriage and drive remediation of vulnerabilities surfaced by code scanning and vulnerability management tooling (e.g., Wiz, GitHub Advanced Security) across the full technology stack\n\nMaintain visibility into third-party/open-source dependency risk (npm, Maven/Gradle, pip) and coordinate patching for critical CVEs\n\nServe as the security point of contact for engineering teams building on React Native, React Web, Node.js, Spring Boot, and Python/Flask, ensuring consistent security posture regardless of language/framework\n\nOwn the security posture of AI/ML systems and LLM-powered features: model access controls, data governance for training/prompt data, prompt injection and jailbreak risk, and secure integration with third-party AI APIs and vendors\n\nEvaluate and vet AI coding assistants and internal AI tooling for data exposure, IP leakage, and supply-chain risk before organization-wide adoption\n\nDefine and maintain security guardrails/review processes for teams building AI-powered features or agents, including monitoring for anomalous or abusive usage patterns\n\nFraud & Payments Security\nPartner with risk and payments teams to investigate and mitigate payment fraud (e.g., card-testing/BIN attacks, risk-scoring anomalies in third-party payment platforms)\n\nAnalyze and recommend changes to fraud risk rules, allow-lists, and risk profiles\n\nTrack and help prioritize security remediation tickets related to payment endpoints\n\n Required:\n5+ years of experience in infrastructure/platform engineering, with hands-on production ownership in multi-account cloud environments\n\nStrong Terraform/IaC experience, including authoring and maintaining shared modules\n\nExperience operating a SIEM platform (Elastic Security preferred) - log ingestion, detection engineering, and alerting\n\nSolid networking fundamentals: load balancers, security groups, WAF, DNS, CDN\n\nExperience with identity providers (Entra ID/Azure AD, Okta, or similar) and authentication/authorization concepts (SSO, SAML, MFA, conditional access)\n\nDemonstrated experience leading or heavily contributing to security incident response\n\nComfortable being a hands-on technical escalation point across multiple teams simultaneously\n\nWorking familiarity with application security practices across modern web/mobile and backend stacks (e.g., React/React Native, Node.js, Java/Spring Boot, Python/Flask) - able to read code, understand architecture, and identify security risk even if not writing production application code day-to-day\n\nPreferred:\nProven experience with AWS, GCP and Azure\n\nFamiliarity with payments security concepts (fraud scoring, PCI-adjacent systems, payment gateway risk tools such as Adyen)\n\nExperience with container orchestration (ECS or similar)\n\nExperience mentoring SOC analysts or junior engineers\n\nFamiliarity with CSPM/vulnerability management tooling (e.g., Wiz, CrowdStrike)\n\nHands-on development or code review experience in React Native, React Web, Node.js, Spring Boot/Java, or Python/Flask\n\nExperience with SAST/SCA tooling (e.g., GitHub Advanced Security, Snyk, SonarQube) and integrating security scanning into CI/CD\n\nFamiliarity with AI/LLM security concepts (prompt injection, data leakage, model access control) and securing AI-powered product features or internal AI tooling\n\nWhat Success Looks Like\nProduction infrastructure incidents are diagnosed and resolved quickly, with root cause identified and preventive fixes (module/PR updates) shipped\n\nSIEM coverage expands reliably with high-quality, low-noise detections\n\nSecurity incidents are triaged and resolved with clear communication and documented runbooks\n\nIdentity and access posture continuously improves (reduced legacy auth, tighter conditional access, cleaner account governance)\n\nCross-functional partners (data, application, payments teams) see this role as a trusted, responsive technical partner\n\nPay Transparency: $145K - $175K\n AS A MEMBER OF THE EQUINOX TEAM YOU WILL RECEIVE:\nWe offer competitive salaries, benefits, and industry leading commission opportunities for club employees\nComplimentary Club membership\nPerks and incentives with our products and services including Personal Training, Pilates, Spa and Shop\nThis job description is intended to describe the general requirements for the position. It is not a complete statement of duties, responsibilities, or requirements. Other duties not listed here may be assigned as necessary to ensure the proper operations of the department.\nEquinox is an equal opportunity employer. For more information regarding our career opportunities, please visit one of our clubs or our website athttps://careers.equinox.com/\nAll your information will be kept confidential according to EEO guidelines. Must have a legal right to work in the United States.","description_format":"text","description_chars":9813,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Sports","Fitness"],"lifecycle":[{"event":"open","at":"2026-10-07T15:20:38Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 7 · green card filings: 2","filings_12m":7,"filings_prev_12m":8,"green_card_filings_12m":2,"median_offered_wage_usd":132500,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":4,"expected_fill_days":31,"reasons":["conf:0","stale_co","win:early","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":175000,"is_top_pay":true},"html_url":"https://alion.io/job/equinox-senior-security-platform-engineer","json_url":"https://alion.io/job/equinox-senior-security-platform-engineer.json","meta":{"generated_at":"2026-10-12T13:44:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21552,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3662},"rest":"https://alion.io/mcp/rest/get_company?id=3662"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fequinox-senior-security-platform-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fequinox-senior-security-platform-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fequinox-senior-security-platform-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/equinox-senior-security-platform-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fequinox-senior-security-platform-engineer"}]}