Platform Security Engineer
Description
ITHAKA’s mission is to expand access to knowledge and education around the world. Our services — JSTOR, Portico, and Ithaka S+R — enable people everywhere to learn, to grow, and to overcome barriers to education. In carrying out our mission, as employees we feel a deep responsibility to members of our community and to each other, and we are committed to building and sustaining a culture where everyone can thrive.
The Role
ITHAKA is seeking a Platform Security Engineer to help mature our DevOps capabilities into DevSecOps by embedding security into software delivery, infrastructure, and developer workflows.
This role focuses on building practical engineering capabilities that help teams identify, prioritize, and remediate security risks more quickly and consistently. Rather than relying on one-off manual efforts, the Platform Security Engineer will improve automation, integrate security tooling into existing workflows, and help make secure practices the default way of working. In this role, you will partner with engineers, architects, and platform stakeholders across ITHAKA to reduce security risk through automation, standardization, and developer enablement.
This role reports to the Associate Director, Product Engineering and is a member of the Technology Enabling Services team. The role works in close partnership with the Chief Architect through a dotted-line relationship that provides technical direction, architectural guidance, and alignment on enterprise security strategy.
Responsibilities
- Build and improve engineering workflows and tooling for vulnerability management across applications, dependencies, containers, and infrastructure.
- Advocate for integration of security checks and policy controls into software delivery pipelines and day-to-day developer workflows.
- Improve dependency management and package governance so teams can address software exposure consistently and sustainably.
- Help evaluate, implement, and tune security tooling includingSAST, DAST, SCA, secret scanning, and related platform controls.
- Build automation that reduces repetitive manual remediation work and speeds up secure delivery.
- Partner with engineering teams to design and promote secure-by-default patterns, templates, and guardrails.
- Work with engineers and technical leaders to triage findings, prioritize risks, and translate them into practical remediation plans.
- Contribute to secure software development lifecycle practices, documentation, and internal guidance that align with how ITHAKA teams build and operate systems.
- Measure the effectiveness and adoption of security controls and recommend practical improvements over time.
Experience and Skills
- 3-5 years of experience in security engineering, platform engineering, DevSecOps, or a closely related technical role.
- Hands-on experience implementing security tooling and controls in modern software delivery environments.
- Experience with vulnerability management, dependency management, package governance, or software supply chain security.
- Familiarity with CI/CD, source control workflows, infrastructure automation, and cloud-based application environments.
- Ability to write scripts or automation to improve security processes and reduce manual effort.
- Strong judgment about balancing risk reduction, developer experience, and delivery needs.
- Clear communication skills and the ability to work effectively with engineers, architects, and other business stakeholders.
- Ability to work independently while also collaborating effectively as part of a cross-functional team, managing substantive technical work, and guiding peers in an area of specialty.
- Experience with AWS infrastructure and services, and common engineering tooling used in modern product organizations is helpful.
- Experience using AI-enabled tooling in this area is beneficial but not required.
Work Authorization and Sponsorship
ITHAKA is not currently considering candidates who require any type of immigration sponsorship (additional work authorization or permanent work authorization) to work in the United States.
Compensation and Benefits
At ITHAKA we believe in openness and fair pay. Part of living those values is our commitment to clarity about salary ranges, so candidates know what to expect. The starting salary for this position ranges from $110,000 to $120,000 per year. Starting pay may vary with job-related knowledge, skills, and experience. At present, our total compensation package for benefits-eligible employees includes medical, dental, and vision plans, an employer-paid 10% retirement contribution, paid parental and caregiver leave, 22 days of paid time off, 11 paid holidays, up to 12 paid sick days, wellness benefits, and more. Please note that ITHAKA, at its discretion, may make changes to its benefits programs from time to time.
Work for ITHAKA
We are committed to our organizational values of belonging, evidence, speed, teamwork, and trust. We take seriously the need for everyone to feel welcome. Belonging is one of our core values, and it shows in our vibrant culture. People from a wide range of backgrounds work at ITHAKA, and we believe that unique perspectives help us realize new insights and build better solutions.
We want to work with people who are passionate about ideas like these and who wish to contribute their perspectives and talents to ITHAKA’s mission. We enthusiastically welcome applications from people of all backgrounds and credentials. We want to hear your story and include your perspective in the transformative work we aim to do.
Learn more about Working at ITHAKA.
Apply Now
Although ITHAKA has physical offices in New York and Ann Arbor, Michigan, our employees are distributed across the continental United States. At this time, we’re not considering candidates who are unable to work and reside in the continental U.S.
Candidates may apply by submitting an application online through our career site, if you have any questions about your application, please contact us at careers@ithaka.org. ITHAKA is committed to providing reasonable accommodations, if there’s anything we can do to accommodate any portion of the application or hiring process, please contact us at accommodations@ithaka.org.
We are proud to be an Equal Opportunity employer. All qualified applicants receive consideration for employment without regard to identity or other status protected by law. We invite you to read our Equal Employment Opportunity Statement. ITHAKA cares about your privacy, learn more about our Applicant Privacy Notice.
Skills
As published by greenhouse · 15 questions · 2 written answers
Basics
First Name, Last Name, Email, Phone, Resume/CV, Cover Letter, Location
Short answers (4)
- Preferred First Name optional
- Please enter your home address (123 Streetname Boulevard, City, State 12345).
- What is your desired salary?
- LinkedIn Profile optional
Pick from a list (9)
- How many years of professional, hands-on experience do you have in security engineering, platform engineering, DevSecOps, or a closely related technical role?
- Which statement best describes your hands-on experience integrating security tools into software development and CI/CD pipelines?
- Which statement best describes your experience identifying, prioritizing, and remediating security vulnerabilities across applications, dependencies, containers, or infrastructure?
- Which statement best describes your experience developing scripts or automation to improve security processes and reduce manual effort?
- For purposes of compliance with The Immigration Reform and Control Act, are you legally eligible for employment in the United States?
- Will you, now or in the future, require any immigration related support or sponsorship from ITHAKA to maintain U.S. work authorization? Immigration-related support includes documentation for F-1 OPT, F-1 STEM OPT, F-1 CPT, and J-1 status. If you require this type of support, please respond “Yes.” Additionally, if you hold or will require sponsorship for a visa such as H-1B, TN, H-1B1, E-3, or any other Employment Authorization Document (EAD) that necessitates employer sponsorship, your answer should also be “Yes.”
- If you are a minor, do you have the necessary work permit or other required documentation which would permit you to work?
- Can you, within the time period prescribed by law, submit verification of both your identity and authorization to work in the United States (Proof will be required)?
- Under the Immigration Reform and Control Act of 1986, you will be required to fill out a certification verifying your employment eligibility and identity. Furthermore, you will be required to provide documentation to that effect should you be employed.
Written answers (2)
- To complete the interview and selection process at ITHAKA, please describe any accommodations you may require. (optional response) optional
- To perform the duties set forth in this job description, please describe any accommodations you may require. (optional response) optional
