Platform Security Engineer

About the role

We are seeking a Platform Security Engineer to join our partner’s team in Chile. In this role you will protect large-scale digital products used by a global audience, working closely with engineering, infrastructure and security teams to harden platform defenses and safeguard customer data.

Key responsibilities

• Design, implement and maintain perimeter and network security controls such as web application firewalls, rate limiting, anti-bot protections and DDoS mitigation.
• Secure APIs against abuse and common vulnerabilities, improving authentication, authorization and access-control mechanisms.
• Lead the vulnerability management lifecycle: identify, prioritize, track and validate remediation of security issues.
• Coordinate external penetration-testing engagements and ensure timely resolution of findings.
• Drive incident-response activities for product security events and enhance detection capabilities with monitoring teams.
• Collaborate on fraud-prevention, trust-and-safety and data-protection initiatives, including encryption, masking and secure access controls.
• Promote secure development practices by managing Security Champions, Bug Bounty programs and security awareness across engineering.

Required profile

• Minimum 5 years of experience in information security, including at least 3 years focused on product security.
• Hands-on experience with Web Application Firewalls such as Wallarm, Akamai or Cloudflare.
• Strong knowledge of API security principles (OWASP API Security Top 10) and API-gateway technologies.
• Proven experience with anti-bot solutions, behavioral analysis and fingerprinting techniques.
• Practical expertise in DDoS protection across Layers 3-7 and modern network defence strategies.
• Experience managing vulnerability management programs, CVSS scoring and remediation prioritisation.
• Familiarity with coordinating penetration-testing engagements and interpreting assessment reports.
• Solid understanding of OAuth, OpenID Connect, JWT, session management and modern authentication frameworks.
• Working knowledge of SQL and Elasticsearch for security investigations and log analysis.

Required skills

• Web Application Firewall (Wallarm, Akamai, Cloudflare)
• API security, OWASP API Security Top 10, API gateways
• Anti-bot solutions, behavioural analysis, fingerprinting
• DDoS mitigation (Layers 3-7)
• Vulnerability management, CVSS scoring
• Penetration-testing coordination
• OAuth, OpenID Connect, JWT, session management
• SQL, Elasticsearch