{"id":3393059,"url":"https://alion.io/job/validio-platform-engineer-security-compliance","title":"Platform Engineer - Security & Compliance","company":{"id":63256,"name":"Validio","domain":"validio.io","url":"https://alion.io/company/validio","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"C","score":68,"open_postings":17,"ghost_share":0.529,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-30T05:48:23Z"}},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Stockholm, Sweden"],"countries":["SE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub Actions","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Azure AKS","optional":true},{"name":"Canva","optional":true},{"name":"Google GKE","optional":true}],"status":"live","first_seen_at":"2026-10-28T08:15:14Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-30T19:09:20Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":2},"description":"Validio is the agentic data management platform that automates data quality, lineage, and cataloging, so enterprises can finally trust the data behind their analytics, AI, and reporting. As a Platform Engineer focused on Security & Compliance, you own how we prove that trust, and you do it like an engineer, not an administrator.\nAs we move up-market into banking and regulated industries, a SOC 2 report, an ISO 27001 certificate, and a credible answer to “how do you protect our data” increasingly decide whether a deal closes. This is a hands-on DevSecOps role inside our Platform Engineering team. You’ll own our compliance program end to end, but you’ll run it from a terminal. You’ll turn control requirements into Terraform, CI checks, and custom tests, so controls stay green without anyone chasing screenshots. It’s not a pure cybersecurity or policy role. You’ll write code and work on the platform alongside the rest of the team.\nWhat you’ll do\nOwn our compliance frameworks (SOC 2, ISO 27001, GDPR, HIPAA, and DORA) and run audit cycles from evidence-gathering to the audit room\n\nRun our Vanta instance and automate it: build custom tests in Go or Python, automate evidence collection, and wire controls into Terraform and GitHub Actions so drift is caught in a PR, not an audit\n\nImplement the technical measures behind our security policies across GCP, AWS, and Azure, including access management and reviews, logging, secrets, and hardening\n\nOwn security questionnaires and our trust center, and rebuild the answer library so a bank’s 300-question questionnaire takes days, not weeks\n\nRun vendor security reviews and the data-protection assessments that come with them (DPIAs, LIAs, TRIAs), and keep our risk register honest\n\nPitch in on platform and reliability work with the rest of the team\n\nWhat you’ll bring\nA background in platform, DevOps, cloud, or security engineering. You’ve built and run infrastructure, not just audited it\n\nExperience owning or heavily supporting a SOC 2 and/or ISO 27001 program, and the ability to turn a control requirement into concrete technical tasks\n\nHands-on experience with cloud infrastructure, ideally GCP (strong AWS or Azure experience also works)\n\nProduction experience with Kubernetes, Terraform, and CI/CD, and enough Go or Python to build the automation this role needs\n\nExperience with a GRC automation platform such as Vanta, Drata, or Secureframe (Vanta a strong plus), and a firm preference for automating evidence over collecting it by hand\n\nClear, persuasive writing: questionnaire answers an enterprise security team trusts, and documentation an auditor accepts the first time\n\nThe drive to get things to closure, including chasing control owners across engineering, IT, HR, and legal\n\nBonus points for\nISO 27001 Lead Implementer / Lead Auditor, CISA, Security+, CISM, or CISSP\n\nSupporting compliance for financial-services or other regulated customers\n\nVendor-risk (TPRM) experience\n\nOur stack, and why\nWe use Vanta for compliance automation, because evidence should come from systems, not screenshots. Our infrastructure spans Google Cloud, AWS, and Azure because our customers run on all three, and our workloads run on Kubernetes across GKE, EKS, and AKS. Everything is defined in Terraform and shipped through GitHub Actions, so controls, evidence, and enforcement live in code you can read, query, and test. We write internal tooling and custom tests in Go and Python. Where the automation isn’t there yet, you build it.\nWhy Validio\nFounded in Sweden in 2019, we’re trusted by data-driven enterprises like Nordea, Canva, Truecaller, Traveloka, and Deutsche Glasfaser. We raised a $30M Series A this year and grew ARR 800% in twelve months as enterprises got serious about making their data AI-ready. We’re 35 people today and growing fast across Sweden, London, New York, and Amsterdam. This role is hybrid, and we expect you to work from our Stockholm office at least a couple of days per week. You’ll own initiatives end to end and make the call when you’re closest to the problem. We’re strict about testing and documentation, and fast about decisions.\nCome as you are. We hire for what you’ll build with us, and we welcome applicants of every background.","description_format":"text","description_chars":4233,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Sweden","iso":"SE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Quality & Observability"],"lifecycle":[{"event":"open","at":"2026-10-28T11:14:55Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":1,"expected_fill_days":39,"reasons":["seen:1","stale_co","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/validio-platform-engineer-security-compliance","json_url":"https://alion.io/job/validio-platform-engineer-security-compliance.json","meta":{"generated_at":"2026-10-30T20:48:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10997,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":63256},"rest":"https://alion.io/mcp/rest/get_company?id=63256"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvalidio-platform-engineer-security-compliance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvalidio-platform-engineer-security-compliance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvalidio-platform-engineer-security-compliance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/validio-platform-engineer-security-compliance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvalidio-platform-engineer-security-compliance"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3393059}},{"tool":"search_jobs","arguments":{"company":"validio.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3393059},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}