Platform Security Engineer
Luxor Technology Corporation is a Delaware company providing integrated Bitcoin mining and AI-compute hardware, software, energy, data, and financial infrastructure.
Funding history
Projects
About Luxor Technology Corporation
Founded in 2017, Luxor builds full-stack compute infrastructure. Its current Bitcoin-mining offering includes a mining pool, LuxOS ASIC firmware, hardware trading and logistics, hashrate derivatives, energy services, fleet management through Commander, and Hashrate Index data products. Luxor also offers AI hardware and reserved GPU capacity, while its Luxor-owned Tenki Cloud product provides GitHub Actions runners, disposable sandboxes, and AI code review.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own security and compliance within the platform scope while helping build and operate production infrastructure. You will embed security into engineering processes, automate testing and enforcement, manage cloud security monitoring, support audits, respond to incidents, and maintain clear documentation of controls and decisions.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.
- 8+ years of experience in DevOps, software engineering, or security engineering.
- Proficiency with CI/CD platforms, infrastructure-as-code tools, and configuration management.
- Proficiency in at least two of Go, JavaScript, Rust, and Python.
- Hands-on cloud security experience across specified cloud providers, including IAM, containerization, network controls, encryption, logging, and monitoring.
- Experience hardening access and controls, including IAM policy.
- Hands-on Kubernetes GitOps experience.
- Experience implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement.
- Familiarity with penetration-testing applications or conducting penetration-testing engagements.
- Strong Python or Bash scripting skills.
- Experience supporting third-party attestations and audits, including SOC 2 Type 2 or ISO 27001.
- Experience operating and maintaining Zero Trust networks using Tailscale and Cloudflare WARP.
- Experience deploying, configuring, and administering SIEM.
- Communication and governance skills to explain technical risk to technical and non-technical audiences.
Responsibilities
- Serve as a day-to-day security advisor during planning, architecture reviews, process discussions, product direction, design decisions, and active work.
- Build and maintain centralized automated security testing and enforcement in CI/CD, including SAST, DAST, SCA, secrets scanning, and IaC scanning.
- Manage centralized cloud monitoring for vulnerability and configuration management.
- Integrate ongoing patching and hardening into engineering operations.
- Audit application environments and development processes for compliance and security-standard alignment.
- Implement and maintain cloud detection and response monitoring.
- Act as an incident CIRT responder.
- Document controls, configurations, and decisions.
- Enforce policies and detection using device-management tooling.
