O

OutSystems

Low-code platform for enterprise-grade apps

Principal Platform Engineer, DevSecOps

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeLisbon, PortugalNo salary listedIn-person

About the Job

Requirements

  • A bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience.
  • Experience owning the security and compliance posture of a production platform end to end, at scale and under audit.
  • A deep security engineering background in deploy-time policy enforcement, vulnerability management at scale, incident response, supply chain integrity (signing, attestation, and software bills of materials), and continuous compliance automation.
  • Hands-on experience with Kubernetes, a major cloud provider (Azure and/or AWS), CI/CD at scale, Terraform, and modern software development lifecycle languages such as Python and .NET.
  • Working knowledge of SOC 2 Type 2 and FedRAMP Moderate, including how their controls apply to deployment, operations, and platform governance.
  • Experience with application security testing, cloud workload protection platform, or cloud-native application protection platform tooling integrated into delivery pipelines.
  • A track record of cross-team technical leadership and mentoring without formal management authority.
  • Availability to participate in an on-call rotation for critical incidents.
  • Strong written and verbal communication for aligning engineering, product, security, and business stakeholders.

Responsibilities

  • Own the technical strategy for outer-loop security and supply chain integrity across research and development delivery; set direction, make trade-off decisions, and align engineering, product, and security leadership.
  • Design and build the systems being architected, including deploy-time policy, attestation verification, remediation workflows, and security automation; personally own critical paths and work in code alongside the team.
  • Enforce supply chain integrity at the release boundary through artifact signing and attestation, software bill of materials and provenance verification, and dependency and third-party risk controls so only trusted artifacts reach production.
  • Build security controls into the deployment path across environments so the pipeline blocks unsafe changes automatically.
  • Manage the vulnerability loop end to end, including detection, prioritization by exploitability, routing, remediation, and verification; ensure critical and high findings are fixed on time and automate wherever human judgment is unnecessary.
  • Lead response to security and operational incidents affecting the delivery platform, drive faster recovery, and own long-term fixes.
  • Automate compliance evidence by turning control requirements into continuous, machine-verified checks.
  • Build automated, secure delivery for build and production environments, keeping the platform secure and resilient with every release.
  • Lead cross-team technical initiatives that raise engineering standards across the organization, and lead architecture and design reviews at a strategic level.
  • Mentor engineers at every level, including beyond the immediate team.
  • Apply artificial intelligence and agents to release and security engineering work.
  • Write standards others build against, including deploy-time policy, platform reliability guidelines, and security baselines, based on implemented systems.

Desired Qualifications

  • Familiarity with policy-as-code frameworks such as Open Policy Agent, Kyverno, or equivalent in production.
  • Experience with Sigstore, Supply-chain Levels for Software Artifacts, or in-toto attestation at production scale.
  • Experience operating multi-tenant software as a service under a government or regulated-sector compliance regime.
  • Experience building agentic systems or artificial intelligence agents applied to security or operations.

About the Company

OutSystems

Low-code platform for enterprise-grade apps

OutSystems provides a high-performance low-code development platform for building and deploying enterprise-grade applications, with built-in AI to speed up development. Users create apps through a visual, low-code interface, use AI-assisted tools to accelerate coding and testing, and deploy to cloud or mobile, covering development, testing, deployment and ongoing management. The platform combines enterprise-grade capabilities with AI-driven acceleration, end-to-end lifecycle support, and a large learning ecosystem with extensive resources. Its goal is to help organizations digitally transform by delivering faster, scalable, and intelligent applications across industries, with a pricing model that starts free and scales as needed.

Company size
1,001-5,000
Company stage
Growth Equity (Venture Capital)
Total funding
$799.8M
Headquarters
Boston, MA
Founded
2001

Recently Posted Jobs

Explore more opportunities at OutSystems

See more jobs