Senior Staff Security Engineer

Veeam is the Data and AI Trust Company specializing in helping organizations ensure their data and AI are fully understood secured and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management Veeam is built for the convergence of identity data security and AI risk. Headquartered in Seattle with offices in more than 30 countries Veeam protects over 550,000 customers worldwide who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together growing learning and making a real impact for some of the world’s biggest brands.

About the Role

We re looking for a Senior Staff Platform Security Engineer to set and deliver the technical direction for platform and AI security at VDC. Veeam VDC Security Engineering builds and operates the security platform for a multi-cloud (Azure and AWS) SaaS serving regulated industries. This role sits in Platform and AI and partners with the other technical leads on the team across three areas that decide how much risk ships with every release software supply chain secure AI sandboxes and vulnerability management. You ll partner with Product Engineering SRE Corporate Technology and Compliance and you ll be measured on mechanisms delivered rather than advice given.

;JobPostGuidelines-WhatYou’llDo.1 What You’ll Do

Partner with the other technical leads on the team to drive software supply chain security across Veeam SaaS platforms Engineer secure AI practices and patterns for Veeam SaaS platforms Partner with the other technical leads on the team to run vulnerability management as an engineering system Deliver security controls as Terraform Build the automation that reduces operational toil Raise the engineering bar across the team Participate in an on-call rotation

Technologies You’ll Work With

Terraform as the primary control plane for security infrastructure Azure Entra ID and _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH RBAC / Key Vault Azure Policy Defender for Cloud Container Instances _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH AKS / Container Registry managed identity and workload identity federation AND AWS equivalents _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH CSPM / for cloud and workload posture attack paths and container findings _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH ASPM / for _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH SAST / _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH SCA / secrets and _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH IaC / scanning in the pipeline GitHub Actions GitHub Apps and Azure DevOps for CI/CD Supply chain provenance tooling _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH SBOM / (CycloneDX or _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH SPDX /) artifact signing and attestation (Sigstore cosign) _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH SLSA / -aligned build integrity Anthropic Claude and Azure OpenAI Python and Go for the tooling stack with comfort reading PowerShell and TypeScript Microsoft Sentinel and Log Analytics for the audit trail

;JobPostGuidelines-WhatYou’llDo.1 What You’ll Bring

8+ years across security and engineering with recent depth in cloud platform security and hands-on delivery Production Terraform at scale. Modules other teams consume not one-off stacks and the judgment to know when a control belongs in code rather than a runbook AI and LLM security specifically prompt injection indirect prompt attack surfaces agent tool-boundary abuse model exfiltration Deep Azure Entra ID and RBAC Key Vault and key handling network egress workload and managed identity policy enforcement and a clear view of where the platform defaults leave you exposed Software supply chain security in practice dependency risk build pipeline integrity provenance and signing and the judgment to know which controls are worth the developer friction they cost Owned vulnerability management as an engineer not a coordinator ingestion deduplication routing _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH SLA / design and measurable reduction rather than a dashboard Designed isolation boundaries for untrusted code execution covering network identity and data with a threat model you can defend Tooling ability in Python or Go sufficient to build and maintain systems rather than only configure vendor products A track record of setting technical direction others followed and of shipping production code you can point to. This is a hands-on building role not an advisory one Familiarity with regulated-industry expectations (SOC 2 Type 2 ISO 27001 FedRAMP HITRUST) and what auditors actually accept as evidence

;JobPostGuidelines-WhatYou’llDo.1 Bonus Skills

Hands-on experience with agentic development environments (Claude Code Cursor GitHub Copilot Enterprise) and their operational security implications CSPM and ASPM tooling at production scale including tuning signal into an owned and closing queue Kubernetes and container security (AKS _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH EKS /) runtime detection admission control image policy Sigstore SLSA in-toto or equivalent provenance frameworks AWS depth alongside Azure Contributions to open-source security supply chain or LLM safety tooling Relevant certifications (Azure or AWS security specialty _2V7sgO2M4S _3BoeIDwZ7G _30zrXRyxdf _0ReiIH7zJH GIAC / or similar)

;JobPostGuidelines-WhatYou’llGet.1 What You’ll Get

25 vacation days 4 sick days 21 paid medical leave days plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares fje8fi8 f1ng9h0j f1bwykku f18jd3zf Premium private medical insurance for employees and dependents fje8fi8 f1ng9h0j f1bwykku f18jd3zf Daily meal vouchers for restaurants and groceries (180 CZK per working day) fje8fi8 f1ng9h0j f1bwykku f18jd3zf Flexible cafeteria platform with thousands of lifestyle benefit options fje8fi8 f1ng9h0j f1bwykku f18jd3zf Multisport Card for gym and wellness with family add-on options fje8fi8 f1ng9h0j f1bwykku f18jd3zf Annual public transport reimbursement up to a set limit fje8fi8 f1ng9h0j f1bwykku f18jd3zf Corporate mobile plan with optional family tariff fje8fi8 f1ng9h0j f1bwykku f18jd3zf Opportunities to learn and grow through on-demand libraries (LinkedIn Learning O’Reilly) mentoring workshops and learning events like our annual Global Day of Learning

# -TK1

1;,null;;style:null;checked:null;value:null;displayValue:null;backgroundColor:null;color:null;listStyleType 1 Veeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race color religion gender age national origin citizenship disability veteran status or any other classification protected by federal state or local law. All your information will be kept confidential.

Personal data collected during the recruitment process will be processed in accordance with our a Recruiting Privacy Notice which explains how your information is collected used and handled in connection with hiring activities. By applying for this position you consent to this processing.

By submitting your application you confirm that the information provided including any supporting documents is complete and accurate to the best of your knowledge. Any misrepresentation omission or falsification may result in disqualification from consideration or if discovered after employment begins termination of employment.

a