Mô tả công việc
About Supabase
Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth.
What Are We Looking For
We’re looking for a Platform Security Engineer to join our team and help strengthen the security of Supabase’s infrastructure, cloud platform, Kubernetes environments, and containerized workloads as we continue to scale. You’ll work closely with infrastructure, platform, SRE, product engineering, and technical leadership, helping us proactively reduce risk across the systems that run Supabase.
What You’ll Be Responsible for
- Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure.
- Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems.
- Partner closely with infrastructure, platform, and SRE teams to design practical controls and secure‑by‑default patterns.
- Improve Kubernetes and container security across areas like workload isolation, RBAC, admission control, secrets, network policy, and runtime hardening.
- Assess container runtime and Linux isolation risks, including capabilities, seccomp/AppArmor, namespaces, cgroups, and container escape scenarios.
- Strengthen AWS security posture across IAM, account boundaries, network controls, logging, detection, encryption, and service configuration.
- Build scalable mechanisms such as automation, guardrails, paved paths, detection, secure defaults, and review frameworks.
- Distinguish between theoretical risk and material platform risk to prioritize security efforts effectively.
You Might Be a Good Fit If
- You have senior‑level experience in platform security, cloud security, infrastructure security, container security, or security engineering.
- You have deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals.
- You have worked in large cloud environments, multi‑cluster Kubernetes setups, developer platforms, SaaS platforms, or high‑scale infrastructure teams.
- You can reason clearly about identity, networking, workload isolation, runtime security, secrets, supply chain, and blast radius.
- You communicate clearly across both technical and non‑technical audiences, especially in a written, asynchronous environment.
- You are able to manage security efforts across complex projects with various stakeholders.
- You are energized by solving real‑world infrastructure security problems and navigating ambiguity while moving quickly.
- You prefer building guardrails, automation, and secure defaults over creating unnecessary process or bottlenecks.
What We Offer
- Fully Remote – We hire globally. We believe you can do your best work from anywhere.
- ESOP – Every team member receives ESOP (equity ownership) in the company.
- Tech Allowance – Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work.
- Health Benefits – Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are.
- Annual Off‑Sites – Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun.
- Flexible Work – We operate asynchronously and trust you to manage your own time.
- Professional Development – Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth.
About the Team
Supabase was born‑remote and open‑source‑first. We believe our globally distributed team is our secret weapon in building tools developers love.
- ~400 team members
- 60+ countries
- 20+ languages spoken
- Over $1B raised (including our $500M Series F)
- 540,000+ community members