Principal Security Engineer – Platform and Cloud

About the role

Ubank is looking for a hands‑on Principal Security Engineer to design and build platform‑level security controls across its cloud‑native environment. You will own the security strategy for Kubernetes, CI/CD pipelines, cloud IAM and container runtime protection, writing production code that becomes the default secure path for product squads.

Key responsibilities

• Design and implement admission controllers, policy engines and enforcement mechanisms to make secure defaults automatic on the Kubernetes platform.
• Develop security middleware libraries and SDKs for authentication, authorisation and secrets management.
• Implement container supply‑chain controls such as image signing, provenance verification and vulnerability gating within CI/CD pipelines.
• Define cloud IAM patterns, account‑level security baselines and network boundary controls across multi‑account environments.
• Build automated security testing pipelines and runtime detection capabilities using eBPF‑based observability and behavioural analysis.
• Facilitate threat‑modelling workshops and publish reference implementations, runbooks and golden‑path examples.

Required profile

• 10+ years of software or security engineering experience, with at least 3 years in platform, cloud or infrastructure security at a senior or principal level.
• Proven track record of shipping reusable security libraries or automation that product teams adopt as the default.
• Experience securing CI/CD pipelines and container supply chains in regulated financial services or critical infrastructure environments is highly desirable.

Required skills

• Kubernetes (admission control, pod security, network policy, workload identity)
• OPA/Gatekeeper or Kyverno
• Cloud IAM architecture and multi‑account security management
• Container supply‑chain security tools (Sigstore, Cosign)
• eBPF, Falco or equivalent runtime security detection
• CI/CD pipeline security, image signing and vulnerability scanning
• Threat modelling and security‑as‑code practices

What we offer

• Hybrid working model with flexibility to balance connection and autonomy.
• Clear career development paths and opportunities to accelerate your growth.
• Collaborative, supportive culture that encourages innovation and individuality.