Software Engineer - Platform Security

As part of Neo4j’s Aura Platform Security team, you design and implement cloud-native security controls at scale across major cloud providers. You’ll raise the security baseline for containerised services and provide expert guidance on cloud, Kubernetes, and secure IaC practices. You’ll shape policy and guardrails, conduct assessments, and support incident detection and response, helping Neo4j ship secure, scalable cloud services. This role combines hands-on engineering with cross-team collaboration to drive secure-by-design outcomes.

• Develop cloud-native security controls for Azure, AWS, and/or GCP and integrate with open-source and vendor tools
• Enhance SDLC security by creating paved roads and security/excellence requirements for containerised services on multi-cluster Kubernetes
• Serve as SME for Platform and Engineering teams on cloud/K8s services, secure IaC, AuthZ/AuthN (e.g., SPIFFE), and secrets management
• Collaborate to define and implement Cloud/K8s native policies and procedures (e.g., Kyverno, Pod Security Standards)
• Conduct security assessments, audits, and architecture reviews to improve the security posture
• Support incident detection/response by maintaining cloud monitoring/alerting tooling and developing troubleshooting scripts

• Containers, Kubernetes, Infrastructure-as-Code
• Programming in Go, Java and/or Python
• Hands-on security engineering experience with decision-making involvement
• Interest/background in Cloud, Infrastructure and/or Network security
• Experience with cloud-native authentication (OIDC/OAuth2), secrets management, admission controllers, service mesh, mTLS, and cloud IAM
• Familiarity with hardening K8s clusters, containerised apps, and Linux hosts
• Ability to architect cloud-native apps including API/microservices on containers

• Security mindset
• Collaborative mindset
• Proactive problem-solver
• Containers and Kubernetes
• Infrastructure-as-Code
• Go, Java, or Python programming