Staff Platform Security Engineer (Security)

Phantom
United States, Canada
Workplace: RemoteFull timeUSD 200,000 - 250,000 annuallyFunction: CybersecurityExperience: 7+ yearsSkills: ["High agency","Ownership","Clear communication","Partnering","Incident response"]

Own platform security for Phantom’s multi-account AWS and production Kubernetes (Amazon EKS) environments. You’ll secure identities, control planes, workloads, and deployment/release systems supporting mission-critical financial products, designing least-privilege access and automating risk detection and remediation. Work hands-on with incident response and verified fixes, building policy-as-code controls with Pulumi/Terraform and hardening CI/CD and software supply chains using GitHub Actions and related tooling.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Phantom
Phantom
17 hours ago

Staff Platform Security Engineer (Security)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live

Job Summary

Own platform security for Phantom’s multi-account AWS and production Kubernetes (Amazon EKS) environments. You’ll secure identities, control planes, workloads, and deployment/release systems supporting mission-critical financial products, designing least-privilege access and automating risk detection and remediation. Work hands-on with incident response and verified fixes, building policy-as-code controls with Pulumi/Terraform and hardening CI/CD and software supply chains using GitHub Actions and related tooling.
Location: United States, Canada
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Own and improve security across Phantom’s multi-account AWS environment, including IAM, Identity Center, networking, compute, storage, secrets, logging, and org-level guardrails.
  • •Secure production Kubernetes environments on Amazon EKS, including cluster configuration, workload identity, RBAC, admission controls, network boundaries, secrets, container security, and tenant isolation.
  • •Design least-privilege identity and access models and build scoped, auditable, time-bound access for sensitive production systems.
  • •Harden CI/CD and software supply chain systems (GitHub Actions, build runners, workload federation, dependencies, artifacts, signing, provenance, production access).
  • •Lead security architecture for new infrastructure and major platform changes, building reusable policy-as-code controls and automation for verified remediation.

Pay and Benefits

Salary: USD 200,000 - 250,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVision401kPaid LeaveWellness StipendMeal AllowanceRemote Work

Key Requirements

  • •7+ years of experience in platform security, cloud security, infrastructure security, security engineering, or a closely related engineering role.
  • •Deep, hands-on experience securing production AWS environments (IAM/resource policies, workload identity, networking, secrets, logging, org-level controls).
  • •Deep experience securing Kubernetes in production, preferably Amazon EKS (RBAC, workload identity, admission controls, network policy, pod security, secrets, cluster hardening).
  • •Experience designing or securing mission-critical systems where compromise, excessive privilege, or loss of availability has significant impact.
  • •Ability to write production-quality code or automation in TypeScript, Python, Go, or Rust.
Experience:7+ yearsPlatform securityCloud securityInfrastructure securitySecurity engineeringAWSKubernetes
Skills:High agencyOwnershipClear communicationPartneringIncident response
Tech Stack:AWSKubernetesAmazon EKSIAMIdentity CenterPulumiTerraformCloudFormationGitHub ActionsKubernetes policy enginesGitHub OIDCArgo CDHelmCrossplaneCloudTrailDatadogWizGuardDutySecurity HubIstio

Company Brief

Phantom
Phantom builds a user-friendly, self-custodial multichain crypto wallet for managing tokens, NFTs, swaps, and on‑chain interactions across Solana, Ethereum, Bitcoin and other networks—focused on mass adoption and consumer finance features.
Industry: Blockchain & Web3
Company Size: Medium (51 to 250 employees)
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series C
Headquarters: San Francisco, United States
Founded: 2021
WebsiteLinkedIn