Engineering - Security Engineer

We believethat everyone can and should automatethe tools they use every day.

The Tray Platform empowers anyone to do more, faster by harnessing automation with the leading, low-code general automation platform.

With Tray.io, citizen automators throughout organisations can easily automate complex processes through a powerful, flexible platform, and can connect their entire cloud stack thanks to APIs.

Your Mission

We are seeking a Security Engineer to join our Corporate Security organisation. This innovator will be hands-on building security into our cloud services, from design, through to implementation and release, within our platform in AWS. 

You’ll have deep technical experience, be passionate about security and confident working across multiple domains, teams and technologies. Whether it’s high level architecture decisions, low level code vulnerabilities or risks from third party libraries you’ll have it covered.

What you will do

Lead threat modelling and secure design reviews for Tray’s applications and infrastructure to implement secure-by-default solutions. Design and implement security solutions to automate the detection and remediation of security issues. Define and implement central security policies for our cloud infrastructure Assist with access management, users/groups/roles, SSO and VPN remote access. Code level security for frontend and backend applications. Work closely with developers to perform code reviews as well as pentesting for Tray applications. Build out automated/scalable “shift left” approaches to code security including SAST/DAST within code pipelines. Protect and monitor deployment services and pipelines. Build out threat detection/investigation systems and incident response processes.

About You

Minimum 4 years experience with hands-on security experience, in-depth knowledge of security and software engineering best practices. Deep understanding of cloud service architectures, API-first software and associated security concepts. Extensive experience building security solutions for cloud services, confident at securely architecting, explaining and implementing security best practices for cloud environments. Experience deploying/integrating with CI/CD and configuring SAST/DAST tooling. Infrastructure level experience with AWS, Kubernetes and Terraform General coding knowledge (any language)

Your team will fully support you to do your best work.

Our team is humble but spirited people, who take immense pride in what they do. We work in a culture built on friendship, transparency, and above all, looking out for one another.

The heart of Tray is made of generosity and trust. It is a community built on individual interactions between people who think differently; who are always available to help, to answer questions and to empower. You'll have endless opportunities to learn and grow in a fun, fast-paced, and open environment. We love to achieve things that haven’t been done before.