Senior Platform Security Engineer at Multiverse

Multiverse is the upskilling platform for AI and Tech adoption. We have partnered with 1,500+ companies to deliver a new kind of learning that's transforming today’s workforce. Our upskilling apprenticeships are designed for people of any age and career stage to build critical AI, data, and tech skills. Our learners have driven $2bn+ ROI for their employers, using the skills they’ve learned to improve productivity and measurable performance. In June 2022, we announced a $220 million Series D funding round co-led by StepStone Group, Lightspeed Venture Partners and General Catalyst. With a post-money valuation of $1.7bn, the round makes us the UK’s first EdTech unicorn. But we aren’t stopping there. With a strong operational footprint and 800+ employees, we have ambitious plans to continue scaling. We’re building a world where tech skills unlock people’s potential and output. Join Multiverse and power our mission to equip the workforce to win in the AI era. The Opportunity We are looking for a security-minded engineer to join our Tech Foundations team. This isn't a traditional InfoSec role where you'll be auditing from the outside. Instead, your mission is to be the security champion within the Platform team. The Foundation teams build the "paved road" for all engineers at our company, creating the tools and infrastructure that empower our product teams to ship secure software, fast with very little friction. You will be a builder, embedding security directly into the fabric of our platform and making "shifting left" a practical reality. This is a unique opportunity to own the security from the ground up, ensuring our tools and infrastructure are secure by default. You'll get to partner closely with our central InfoSec team for strategic guidance while being technically responsible for implementing security solutions as a member of the Platform team. You’ll help the team spot potential vulnerabilities before they reach production and coach engineers on secure coding practices. We are committed to building a diverse and inclusive team. We believe that different perspectives and backgrounds are what make our company and our products stronger. What You'll Do: - Architect Secure Foundations: You help the platform team to own the security of our developer platform. This includes designing, building, and maintaining security controls and services within our CI/CD pipelines. - Secure Our Infrastructure as Code (IaC): Partner with your Platform teammates to be the subject matter expert for securing our Terraform modules and cloud environments (AWS, Azure). You'll focus on preventing misconfigurations before they're deployed. - Incident Response and Operations: Participate in the team's on-call rotation, including out-of-hours coverage to support platform availability and security. We strive to keep our rotation sustainable and low-noise to respect your work-life balance. You will assist in troubleshooting critical issues, lead the response for security-specific incidents. Crucially, we believe in a blameless culture, so you will drive post-mortems focused on learning and preventing recurrence. - Build a Secure "Paved Road": Seamlessly integrate and orchestrate security testing (SAST, DAST, SCA, container scanning) into developer workflows. The goal is to make security testing a self-service, low-friction part of the development lifecycle. - Enable Vulnerability Remediation: Develop tools and processes to help engineering teams triage, prioritise, and remediate vulnerabilities. Your focus will be on automating discovery and providing clear, actionable context to developers. - Implement Platform-Level Detection: Leverage our cloud security and observability platforms to build robust, automated threat detection and response capabilities for the platform itself. - Be a Security Partner: In partnership with Infosec team, act as a primary security consultants for our developers. You'll provide expert guidance on secure coding (Elixir, TypeScript/Node, Python), secret management, and securing our event-driven architecture and AI services. - Govern Emerging Technologies: Help architect and implement our AI Management System, ensuring our innovative AI services are built on a secure foundation that meets governance standards like ISO42001. About You: We're looking for someone who is excited about building secure systems and empowering other engineers. Your background might be in Software Engineering, Platform Engineering, or Cloud Security. We're more interested in your skills and passion than a specific job title. What we're looking for: - A "Builder" Mindset: You have strong coding and scripting skills (e.g., Python, TypeScript/Node) and a passion for automating everything. - Cloud & Infrastructure Experience: You have experience building and securing modern cloud-native infrastructure, including CI/CD pipelines (like GitHub Actions), cloud environments (AWS/Azure), and Infrastructure as Code (like Terraform). - Application Security Knowledge: You have a solid understanding of the AppSec landscape and practical experience integrating tools (SAST, DAST, SCA) into developer workflows. - A Collaborative Partner: You have excellent communication skills. You enjoy collaborating with engineering teams and translating complex security concepts into clear guidance. - Observability-Driven: You have experience using security and monitoring platforms (like Datadog) to detect and respond to threats. Bonus points if you have: - Experience securing event-messaging platforms (e.g., CloudAMQP, RabbitMQ). - Familiarity with the Elixir programming language. - Familiarity with securing AI/ML pipelines or services. - Relevant industry certifications (e.g., AWS Certified Security - Specialty, AZ-500).  Benefits - Time off - 27 days holiday, plus 5 additional days off: 1 life event day, 2 volunteer days, 2 company-wide wellbeing days (M-Powered Weekend) and 8 bank holidays per year - Health & Wellness- private medical Insurance with Bupa, a medical cashback scheme, life insurance, gym membership & wellness resources through Wellhub and access to Spill - all in one mental health support - Hybrid work offering - for most roles we collaborate in the office three days per week with the exception of Coaches and Instructors who collaborate in the office once a month - Work-from-anywhere scheme - you'll have the opportunity to work from anywhere, up to 10 days per year - Space to connect: Beyond the desk, we make time for weekly catch-ups, seasonal celebrations, and have a kitchen that’s always stocked! Our Commitment to Diversity, Equity and Inclusion We’re an equal opportunities employer. And proud of it. Every applicant and employee is afforded the same opportunities regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. This will never change. Read our Equality, Diversity & Inclusion policy here [Upgrade to PRO to see link] Our Commitment to Safeguarding Multiverse is committed to safeguarding and promoting the welfare of our learners. We expect all employees to share this commitment and adhere to our Safeguarding Policy [Upgrade to PRO to see link] our Prevent Policy [Upgrade to PRO to see link] all other Multiverse company policies. Successful applicants will be required to undertake at least a Basic check via the Disclosure Barring Service (DBS). For roles that will involve a Regulated Activity, successful applicants must also undergo an Enhanced DBS check, including a Children’s Barred List check and a Prohibition Order check. Roles involving Regulated Activity may interact with vulnerable groups, therefore are exempt from the Rehabilitation of Offenders Act 1974 meaning applicants are required to declare any convictions, cautions, reprimands, and final warnings. Providing false information is an offence and could result in the application being rejected or summary dismissal if the applicant has been selected, and possible referral to the police and the DBS.