THE PROJECT We’re looking for an experienced Senior Platform Security Engineer to join Form3 on a contract basis as part of our AI Resilience & Security Enhancements programme. This is a hands-on role working closely with our engineering, platform and security teams. The main focus will be building security controls into our engineering platform and developer workflows. You’ll work across areas such as secure autonomous agent execution, CI/CD and code security, production access controls and software supply chain security. We’re looking for someone who can understand a security problem, work out practical controls, prototype and implement solutions, and work with software engineers where larger application changes are needed. Design, evaluate and implement controls for secure autonomous agent execution, including policy enforcement, permissions, sandboxing, execution isolation and auditability. Evaluate and implement ways to detect vulnerable or unsafe code changes before merge, integrating security controls into CI/CD and pull request workflows. Explore both existing security tooling and AI-assisted approaches to code security, considering accuracy, false positives, bypasses and usability. Strengthen production access by implementing secure privileged-access controls, controlled access paths, least privilege, session controls and auditability. Strengthen CI/CD and software supply chain security, including secure builds, dependency and container scanning, provenance, artefact signing, SBOMs and policy enforcement. Build security automation and platform controls that are practical for engineering teams to use and maintain.



Contribute to wider security engineering work where your experience is useful, working with Form3 security specialists where deeper domain knowledge is needed. Strong hands-on experience in Platform Engineering, DevOps, SRE, DevSecOps or Platform Security , with good security fundamentals. Experience implementing security controls yourself, rather than only reviewing systems or reporting security findings. Strong understanding of CI/CD and modern software delivery , including integrating security controls into engineering workflows. Good understanding of software supply chain security , such as dependency security, secure builds, provenance, signing or vulnerability management. Good understanding of IAM, RBAC and least privilege . Experience with container security and some practical Kubernetes knowledge. Comfortable writing automation or tooling in a programming language. Experience with Go or Python would be useful, with willingness to work in Go where needed. Experience working with engineers to deliver practical security improvements into production systems. Terraform or other Infrastructure as Code experience. Experience with AWS, GCP or other public cloud platforms. Security automation or policy-as-code experience. Experience using LLMs for security analysis or automation.



Go / Python – security tooling and automation CI/CD – secure builds, automated security checks and engineering workflows Kubernetes – containerised workloads and runtime security Terraform – Infrastructure as Code and security automation AWS / GCP – cloud infrastructure IAM / RBAC – least privilege and privileged access controls Software supply chain security – scanning, provenance, signing, SBOMs and integrity controls Security policy and automation – policy enforcement, guardrails and automated controls AI security – secure agent execution, AI-assisted analysis and engineering controls Stage 1: Stage 2: Platform Security & Secure Engineering Practices interview We always aim to stick to the above process, however there may be occasions when an additional interview stage is needed for us to be sure we’re hiring the right fit for the role. Here are the locations that we are looking to engage with contractors from. Please note, we are not looking to engage with contractors outside of these locations. All contractors start their first day in our office to collect the equipment needed to work remotely. Revolutionising the world of payments with our cloud-native, multi-cloud platform. It is our strong belief that the more inclusive and belonging we are as a business, the better our work will be. This includes providing job adverts in alternative, accessible formats or adjustments required at interview stage. tech clearly stating your consent for us to process this data. For more information please refer to our Recruitment Data Policy .

📌 Senior Platform Security Engineer (España)
🏢 Form3
📍 España