Senior Platform Security Engineer, Device Trust, Attestation and Secure Browser

What you'll do

• Design and implement a device attestation service using hardware roots of trust like TPM 2.0 and Secure Enclaves.
• Lead the engineering and enterprise rollout of the secure browser platform, including access policies and DLP controls.
• Build and operate SRE agents to automate the detection, triage, and remediation of security platform issues.
• Define reference architectures that bind device trust to session trust for browsers, CLIs, and agentic workflows.
• Integrate device and browser trust signals into identity and access workflows to enable risk-based access decisions.
• Scale platform-security capabilities across heterogeneous endpoint environments while maintaining performance and reliability.
• Establish service-level objectives, observability, and capacity planning for device-trust and secure-browser services.
• Lead incident response and implement durable corrective actions for security platform failures.

What we're looking for

• Bachelor's degree or Master's degree or equivalent experience in Computer Science or a related field.
• 12+ years of experience in platform, infrastructure, or security engineering, including significant depth in endpoint or platform security.
• Strong, current software development skills with a track record of shipping and operating production services.
• Experience designing, building, and owning large-scale distributed services or security platforms.
• Demonstrated experience automating operations at scale, including building self-healing systems and running services against defined SLOs.
• Solid understanding of Zero Trust architecture, device trust models, and endpoint attack techniques.
• Working knowledge of at least one hardware or platform trust primitive such as TPM, Secure Enclave, or measured boot.
• Excellent written and verbal communication skills to drive architecture decisions across senior and executive audiences.