{"id":3612812,"url":"https://alion.io/job/nintex-platform-security-engineer","title":"Platform Security Engineer","company":{"id":58706,"name":"Nintex","domain":"nintex.com","url":"https://alion.io/company/nintex","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":90,"open_postings":5,"ghost_share":0,"stale_share":0.2,"repost_share":0,"time_to_fill_p50_days":61,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Melbourne, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GitHub","optional":false},{"name":"Go","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Service Mesh","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SOC 2","optional":false},{"name":"TypeScript","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-02T12:33:40Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-04T05:17:33Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About Nintex: \nAt Nintex, we are transforming the way people work, everywhere. \nAs the global standard for process intelligence and automation, we're trusted by over 10,000 public and private sector organizations across 90 countries. Our customers, from industry giants like Amazon, Coca-Cola, and Microsoft, rely on the Nintex Platform to accelerate their digital transformation journeys by managing, automating, and optimizing business processes quickly and efficiently. We improve their lives through the technology we build. \nWe are committed to fostering a workplace that supports amazing people in doing their very best work every day. Collaboration is constant, our workplace is fun, the environment is fast-paced, and we value our people’s curiosity, ideas, and enthusiasm. Driven by passion and accountability, we take initiative, measure progress, and deliver results. Our culture fosters innovation and problem-solving, fueled by curiosity and a commitment to thinking big. Together, we move with agility, prioritize customer needs, and build unity through empathy, leaving a positive impact wherever we go. \nWorking in engineering:\nWorking at Nintex as an engineer means building more than just software; it’s about making a tangible impact with every line of code. Our engineers are process experts, developing the industry’s most complete process and automation platform to transform the way people work. If you’re interested, curious and want to learn and do more, the sky is the limit here. We take a solutions-oriented and collaborative approach, constantly innovating our business and products. \nAbout the role: \nAs a Platform Security Engineer, you are a developing security professional building expertise in securing cloud-native infrastructure, container platforms, CI/CD pipelines, and product services within the Platform Engineering organization. You take ownership of moderately complex security tasks with increasing autonomy while receiving guidance on architectural decisions and strategic direction. You implement and maintain security controls, build standardized security processes for engineering teams (vulnerability management, production security checks, secure build pipelines), support penetration testing and SOC operations for the product environment, contribute to compliance-related activities from the product security perspective, and help embed security practices into the developer experience through tooling and documentation. You are building depth and maturity in infrastructure security, application security, and shift-left practices needed to progress toward a senior platform security role.\nYour contribution will be:\nYou conduct vulnerability assessments of platform and product infrastructure components, coordinating remediation with SRE, Platform Engineering, and product service teams.\nYou maintain a vulnerability tracking system and produce regular reporting on security posture, remediation velocity, and risk trends for engineering leadership.\nYou implement and maintain security gates in CI/CD pipelines including dependency scanning, static application security testing (SAST), software composition analysis (SCA), and container image scanning.\nYou review code and other security remediations and provide development teams with security guidance.\nYou implement and maintain security controls across the platform, including container orchestration security policies, network segmentation, role-based access controls, and admission control mechanisms.\nYou manage container image scanning and enforce image policies in CI/CD pipelines and cluster admission, ensuring only vetted and signed images reach production environments.\nYou support infrastructure-as-code security scanning using policy-as-code tooling, flagging and remediating misconfigurations in infrastructure definitions before they reach production.\nYou maintain and improve secrets management workflows, ensuring rotation policies are enforced, access is audited, and no secrets are hardcoded or exposed in source code or configuration.\nYou support cloud security posture management across cloud environments, monitoring for drift, misconfiguration, and compliance deviations against established baselines.\nYou support service mesh security configuration including mutual TLS enforcement, authorization policies, and traffic policies that enforce zero-trust communication between platform services.\nYou contribute to tenant isolation and access control configuration for shared platform services, ensuring appropriate segmentation between teams and environments.\nYou participate in security incident response for platform and product-related events, supporting investigation, containment, evidence preservation, and documentation under guidance from the Senior Platform Security Engineer.\nYou support compliance-related activities from the product security perspective, providing evidence, documentation, and technical validation for audits and assessments (SOC 2, ISO 27001, CIS Benchmarks) without owning the compliance program itself.\nVulnerability report generation, security posture dashboards, and remediation workflow tooling.\nYou contribute to security reviews for infrastructure and product changes, providing feedback on pull requests and architecture proposals from a security perspective.\nYou explain security concepts and requirements to engineering teams, empowering them to build securely and understand the rationale behind security controls.\nTo be successful,we think you need:\n\nBachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or related field; or equivalent combination of education and experience.\n2+ years of professional experience in security engineering, infrastructure security, DevSecOps, application security, or related field.\nHands-on experience with at least one major cloud platform (Azure or AWS).\nWorking knowledge of container orchestration security concepts in Kubernetes: pod security, role-based access control, network policies, admission controllers.\nExperience with infrastructure-as-code tools and understanding of how to secure IaC workflows.\nUnderstanding of CI/CD pipeline security: dependency scanning, SAST/SCA integration, artifact integrity.\nUnderstanding of security frameworks and compliance standards (SOC 2, ISO 27001, CIS Benchmarks, OWASP).\nProficiency in scripting (Python, Bash, Go, or PowerShell) for security automation and tooling.\nProficiency with programing languages ( C#, Javascript/Typescript).\nExperience with or exposure to penetration testing, vulnerability management workflows, and security incident response.\nStrong communication skills with the ability to explain security findings and build standardized processes that engineering teams adopt. GitHub and/or Azure DevOps pipelines.\nValued certifications: Security+, CEH, GIAC GWAPT, BSCP etc. \n\nWhat’sin it for you? \nNintex has a hybrid working model, enabling us to build culture, learn, and grow together. We intentionally connect and collaborate, while emphasizing flexibility with a blend of at-home and in-office work. This role is a hybrid role in our local Nintex office.\nWhile our offerings differ from country to country, we offer our entire global workforce an array of exciting perks and benefits, including \nGlobal Gratitude and Recharge Days\nFlexible, paid time off policy\nEmployee wellness programs and counseling resources\nMeaningful peer recognition and awards\nPaid parental leave\nInvention/patenting assistance\nCommunity impact, paid volunteer time, and opportunities\nIntercultural learning and celebration\nMultiple tools through which to learn and grow, and an incredible global community \nView more about our benefits here: https://www.nintex.com/wp-content/uploads/2023/01/Global-Perks-and-Benefits.pdf. \nWe are a 2023 Circle Back Initiative Employer - we commit to respond to every applicant.","description_format":"text","description_chars":7903,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work","Parental leave","Wellness"],"hiring_locations":[{"name":"Australia","iso":"AU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Workflow & Process Automation (RPA, BPM)","Low-Code & No-Code Platforms"],"lifecycle":[{"event":"open","at":"2026-11-02T15:04:04Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":61,"reasons":["conf:1","velocity","win:early","comp:junior"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/nintex-platform-security-engineer","json_url":"https://alion.io/job/nintex-platform-security-engineer.json","meta":{"generated_at":"2026-11-04T06:19:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9867,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58706},"rest":"https://alion.io/mcp/rest/get_company?id=58706"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnintex-platform-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnintex-platform-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnintex-platform-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nintex-platform-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnintex-platform-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3612812}},{"tool":"search_jobs","arguments":{"company":"nintex.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3612812},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}