Senior Platform Security Engineer

NTT Ltd is seeking a Senior Platform Security Engineer to lead end-to-end engineering, certification, deployment, and operationalization of a third-party AI-powered penetration testing platform within a hybrid enterprise environment. The role includes platform infrastructure ownership, security controls, integrations with enterprise security tooling, API-driven automation, and ongoing operational management focused on risk and compliance.

Location and Work Model

Irving, TX (hybrid)

Salary

USD 102,675 - 171,125 per year

Key Responsibilities

• Lead end-to-end engineering for a third-party AI-powered penetration testing platform, covering build, configuration, integration, certification, deployment, and operationalization.
• Provision and configure infrastructure, platform components, security controls, connectivity, and supporting services across cloud and on-premises environments.
• Own the platform technical certification process, including security assessments, architecture reviews, vendor validation, compliance reviews, and internal technology-risk approvals.
• Create and maintain platform architecture diagrams, build documentation, configuration standards, operational runbooks, and certification evidence.
• Act as the primary technical interface with third-party vendors during implementation, certification, upgrades, and ongoing operations.
• Design and implement integrations between the platform and enterprise security technologies, including SIEM, SOAR, vulnerability management, ticketing, and reporting platforms.
• Develop REST APIs, webhooks, event-driven connectors, and data integrations to automate findings ingestion, alert routing, remediation workflows, and downstream security processes.
• Ensure integrations meet enterprise security, networking, architecture, and data governance standards.
• Build and operate cloud-native infrastructure in AWS and/or Google Cloud Platform, including compute, networking, storage, containers, IAM, and related services.
• Develop and maintain Infrastructure-as-Code using Terraform, CloudFormation, or equivalent tools for repeatable, controlled, auditable deployments.
• Design and maintain CI/CD pipelines for deployments, component updates, configuration management, and drift detection.
• Deploy and manage containerized components using Docker and Kubernetes on platforms such as Amazon EKS and GKE.
• Design and enforce network segmentation, private connectivity, firewall controls, and least-privilege IAM across platform components.
• Provide ongoing operational management, including health monitoring, patching, capacity management, incident response, upgrades, and configuration changes.
• Maintain operational runbooks, alerting frameworks, and Service Level Agreements (SLAs) and Service Level Objectives (SLOs).
• Coordinate platform upgrades, vendor releases, patches, and configuration changes through established change-management processes.
• Implement and maintain backup, recovery, resiliency, and business continuity capabilities for platform components.
• Collaborate with Red Team, Offensive Security, Vulnerability Management, and other security stakeholders to configure and optimize AI-powered penetration testing capabilities.
• Manage platform scope configuration, target onboarding, testing policies, and governance for safe and compliant penetration testing activities.
• Support findings triage, deduplication, prioritization, and integration into vulnerability-management and remediation workflows.
• Ensure platform components meet security standards for encryption, secrets management, audit logging, authentication, authorization, and access control.
• Support technology-risk assessments, security reviews, compliance reviews, and internal or external audits related to the platform.
• Maintain security and operational risk registers and coordinate remediation and escalation for identified risks.
• Monitor platform health and performance using observability tools such as Datadog, Amazon CloudWatch, Google Cloud Monitoring, or equivalents.

Required Qualifications

• Minimum 7+ years of overall experience in Platform Engineering, Cloud Infrastructure Engineering, Security Engineering, or a related technical discipline.
• Minimum 7+ years delivering, integrating, and operating complex third-party, vendor-hosted, or hybrid enterprise platforms.
• Minimum 7+ years deep hands-on cloud engineering experience with AWS and/or Google Cloud Platform.
• Minimum 7+ years experience with cloud infrastructure technologies including compute (EC2 or GCE), networking, storage, IAM, and containerized workloads.
• Minimum 7+ years experience with cloud networking patterns and technologies such as VPCs, PrivateLink or equivalent private connectivity, VPNs, routing, and firewalls.
• Minimum 7+ years strong experience with Infrastructure-as-Code technologies such as Terraform, CloudFormation, or equivalent provisioning tools.
• Minimum 7+ years experience designing and implementing CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, or equivalent.
• Minimum 7+ years strong experience with Docker and Kubernetes, including managed Kubernetes platforms such as EKS and/or GKE.
• Minimum 7+ years experience managing the full lifecycle of third-party technology platforms, including build, certification, integration, deployment, upgrades, and operations.
• Minimum 7+ years experience with enterprise technology-risk, platform certification, security review, and vendor-management processes.
• Minimum 7+ years strong understanding of hybrid architectures spanning cloud-hosted and on-premises infrastructure.
• Minimum 7+ years experience managing connectivity, data flows, dependencies, and operational requirements across hybrid cloud and on-premises environments.
• Minimum 7+ years experience designing and developing APIs, REST integrations, webhooks, and event-driven connectors.
• Minimum 7+ years experience integrating enterprise platforms with SIEM, SOAR, vulnerability-management, ticketing, and security-reporting systems.
• Minimum 7+ years experience with data ingestion, transformation, and workflow automation patterns supporting security operations.
• Working knowledge of penetration testing methodologies, vulnerability management, offensive security operations, and remediation workflows.
• Understanding of enterprise security controls including network segmentation, least-privilege access, IAM, encryption, secrets management, and audit logging.
• Minimum 7+ years experience configuring and operating security platforms in controlled enterprise production environments.
• Strong platform operations experience, including monitoring, alerting, incident response, patch management, capacity management, and production support.
• Minimum 7+ years experience with observability and monitoring tools such as Datadog, CloudWatch, Google Cloud Monitoring, or equivalents.
• Minimum 7+ years experience creating operational documentation, architecture diagrams, implementation procedures, runbooks, and technical standards.
• Strong analytical, troubleshooting, problem-solving, communication, and stakeholder-management skills.
• Ability to collaborate with Cloud Engineering, Infrastructure, Cybersecurity, Red Team, Vulnerability Management, Architecture, Risk, Compliance, and vendor teams.

Technologies

• AWS, Google Cloud Platform
• EC2, GCE, VPCs, PrivateLink, VPNs
• Terraform, CloudFormation
• GitHub Actions, GitLab CI, Jenkins
• Docker, Kubernetes, Amazon EKS, Google Kubernetes Engine (GKE)
• REST APIs, webhooks
• SIEM, SOAR, vulnerability-management, ticketing
• Datadog, Amazon CloudWatch, Google Cloud Monitoring
• Infrastructure-as-Code, IAM
• Private connectivity (including PrivateLink or equivalent)
• Cloud-native infrastructure

Benefits

• Medical, dental, and vision insurance with an employer contribution
• Flexible spending or health savings account
• Life and ADD insurance
• Short and long term disability coverage
• Paid time off
• Employee assistance
• Participation in a 401k program with company match
• Additional voluntary or legally-required benefits

Nice to Have

• Experience implementing or operating AI-powered penetration testing or automated offensive-security platforms
• Experience supporting Red Team, penetration testing, vulnerability-management, or attack-simulation programs
• Experience with advanced security automation and orchestration across SIEM, SOAR, and vulnerability-management platforms
• Experience operating security platforms within large, highly regulated enterprise environments
• Experience implementing advanced network segmentation and private-cloud connectivity architectures
• Experience with enterprise security architecture, technology-risk certification, and security-control validation
• AWS Certified Solutions Architect certification
• AWS Certified Security - Specialty certification
• Google Professional Cloud Architect certification
• Google Professional Cloud Security Engineer certification
• Offensive Security Certified Professional (OSCP) certification
• Certified Information Systems Security Professional (CISSP) certification
• Certified Cloud Security Professional (CCSP) certification