Platform Security Engineer (Senior+)

AI overview

This role involves designing and implementing security measures for a large data platform while collaborating across teams to address complex security challenges.

We are looking for two Platform Security Engineers (Senior+) to join our Product Security domain. This role exists because the scope and importance of our work has outgrown the capacity of a single person.

Our platform underpins multiple products and handles sensitive, high-value data. At its core sits a large, graph-based data store that powers downstream systems. Building and securing access to that data, correctly and pragmatically, is critical to the company.

This is a hands-on engineering role. You will design, build, and ship production-grade security and privacy controls, not just define policies or review designs from the sidelines.

Requirements

About the role 

  • We are looking for two Platform Security Engineers (Senior+) to join our Product Security domain. This role exists because the scope and importance of our work has outgrown the capacity of a single person. 
  • Our platform underpins multiple products and handles sensitive, high-value data. At its core sits a large, graph-based data store that powers downstream systems. Building and securing access to that data, correctly and pragmatically, is critical to the company. 
  • This is a hands-on engineering role. You will design, build, and ship production-grade security and privacy controls, not just define policies or review designs from the sidelines 
  • Improving and maintaining supply-chain security, including SAST, SCA, container scanning, and CI/CD hardening 

This role is intentionally broad. You will not be a single-domain specialist, and you will not be shielded from complexity. 

What success looks like 

After ~90 days, a successful hire will have: 

  • Shipped meaningful, production-level security improvements 
  • Taken ownership of parts of the AuthN/AuthZ model and implementation 
  • Developed a solid mental model of our data flows and privacy risks 
  • Earned trust across teams as someone who can say “this is not okay” — and explain why, with facts 
  • Reduced risk in practical ways, not through security theatre 

 

How you’ll work 

This is a high-autonomy role. You are expected to scope problems yourself when needed. 

  • You will collaborate closely with engineers across the company, not operate as a silo. 
  • Disagreement is normal — decisions should be backed by reasoning, data, and threat modeling, not ego. 
  • Blocking a release on security or privacy grounds is possible when warranted, with clear escalation paths. 
  • If you see a problem, even outside your direct domain, you are expected to help fix it. 

 

What we’re looking for 

Required 

  • Strong proficiency in Python (our primary language) 
  • Deep understanding of authentication and authorization concepts, including OAuth, JWTs, permission models, and secure token handling 
  • Experience designing and securing non-trivial data systems 
  • Ability to reason about risk, trade-offs, and real-world constraints 
  • A track record of shipping real security improvements, not just writing policy 

 

Strongly preferred 

  • Experience with graph databases, ideally Neo4j or similar 
  • Experience with CI/CD and supply-chain security (SAST, SCA, container scanning, pipeline hardening) 
  • Experience with Go or Rust 
  • Some familiarity with frontend or React (not required, but useful for end-to-end thinking) 

 

What this role is not 

  • Not a policy-only or advisory role 
  • Not a role with pre-defined, perfectly scoped tasks 
  • Not about chasing tools without understanding the problems they solve 
  • Not security theatre If you need everything spelled out, or prefer to avoid ambiguity, this role will be frustrating. 

Seniority & growth 

  • This role is intentionally leveled as Senior+. We are open to hiring at different seniority levels if the fit is right. Titles matter less than ownership, judgment, and impact. 

Why join 

  • You’ll work on core platform security problems that directly affect how data is accessed, protected, and trusted. You’ll have real influence, real responsibility, and the space to do things properly, without losing sight of pragmatism. 

Benefits

  • Join a pioneering joint venture at the intersection of AI and industry transformation.
  • Work with a diverse and collaborative team of experts from various disciplines.
  • Opportunity for professional growth and continuous learning in a dynamic field.

About ComplexioIf you are passionate about revolutionizing the dynamics of human-machine interaction, especially within sectors like shipping and other industrialized industries, we invite you to explore exciting job opportunities with us. Our commitment to innovation and transformative change is evident through collaborative partnerships that have given rise to a groundbreaking global technology. This technology, centered around AI and human-machine collaboration, is poised to redefine standards across various industries. Join us in shaping the future of technology and human-machine teaming.Complexio is a joint venture between Hafnia and Símbolo with other global shipping companies involved as development partners/shareholders. Hafnia is the world’s largest tanker company, publicly listed in Oslo: HAFNI, and is a member of the BW Group of companies. Símbolo are deep tech innovation specialists.

View all jobs
Ace your job interview

Understand the required skills and qualifications, anticipate the questions you may be asked, and study well-prepared answers using our sample responses.

Security Engineer Q&A's
Report this job
Apply for this job