Senior Platform Security Engineer (Muntinlupa, Philippines, National Capital Region (NCR))
About this opportunity
The Position
Join Boehringer Ingelheim's Cyber Intelligence & Security Operations Center (CISOC) as a Platform Security Engineer, where you will help secure cloud platforms, containerized environments, and software development ecosystems. In this role, you will engineer, operate, and continuously enhance cloud and application security capabilities while partnering closely with DevOps, platform engineering, and development teams.
You will play a critical role in advancing DevSecOps practices, strengthening cloud security posture, automating security processes, and ensuring security controls are effectively integrated throughout the Secure Software Development Lifecycle (SSDLC).
Duties & Responsibilities
As a member of the Cyber Intelligence & Security Operations Center (CISOC) team, the role will engineer, operate and continuously improve security capabilities across cloud platforms and the Secure Software Development Life Cycle (SSDLC).
Operate and improve CSPM platform, including cloud posture, workload protection, vulnerability and misconfiguration management.
Analyse cloud and workload findings, tune policies, manage justified exceptions and support risk-based remediation with cloud and application teams.
Support security for Kubernetes environments, including container images, registries, cluster configurations, workload vulnerabilities and runtime controls.
Engineer and maintain SSDLC security controls covering source code, open-source dependencies, secrets, infrastructure as code, container images, APIs and testing.
Integrate security controls and actionable feedback into supported development and delivery workflows in collaboration with DevOps and platform teams.
Administer security platforms, monitor service health and coverage, troubleshoot integrations and coordinate vendor support cases.
Develop Python automation and API integrations for onboarding, policy management, data quality, reporting, workflow orchestration and repetitive operational tasks.
Provide technical analysis, remediation guidance, training and documentation to cloud, platform and development teams.
Create and maintain dashboards, reports, runbooks, standards and operational procedures, and support ITSM-based workflows where applicable.
Collaborate across both focus areas to provide mutual coverage and ensure cloud, container and software-development risks are handled consistently.
Follow Boehringer processes and maintain required operational, compliance and audit documentation.
Requirements:
An ideal candidate will have:
Hands-on experience in DevSecOps, cloud security, platform security or a comparable engineering role.
Practical experience with at least one major cloud provider and working knowledge of multi-cloud environments across AWS, Azure and GCP.
Experience with Prisma Cloud or a comparable CNAPP/CSPM/CWPP platform is strongly desired.
Experience with Kubernetes or OpenShift, container images, registries and container security controls.
Knowledge of SSDLC and security testing concepts such as SAST, SCA, secrets detection, infrastructure-as-code scanning, image scanning, DAST or API security.
Experience integrating and operating security controls in development and delivery workflows.
Strong Python skills for automation, API integration, data processing and reporting.
Working knowledge of Git, CI/CD concepts, Terraform or other infrastructure-as-code technologies, and REST APIs.
Ability to analyse technical findings, distinguish relevant risk from noise and provide practical remediation guidance.
ServiceNow or comparable service-management knowledge is advantageous but not mandatory.
Excellent spoken and written English, strong collaboration skills and experience in an international, multicultural environment.
Relevant cloud, Kubernetes, DevSecOps or security certifications are desirable but not mandatory.
]]>
Job details
How this role compares
Computed from every other active Information Technology role in our database, not just this employer's listings.
We currently track 393 comparable Senior Information Technology roles across 49 biopharma companies.
Salary context
61 of 393 peers report a salary range (USD, annualized)
Peers share this role's job function and a matching or adjacent seniority level -- not necessarily the same therapeutic area or country.
Where these roles are based
Top locations among the 393 comparable roles
+ 22 more countries
Seniority mix
393 of 393 peers have a known seniority level
Therapeutic area mix
1 of 393 peers have a known therapeutic area; the rest are genuinely unlabeled, not hidden
Similar opportunities
The closest matches from our peer group, ranked by how similar they are, not how well you'd qualify for them -- treat this as market context, not a guaranteed shortlist; a weak match is labeled as one below.
Notify me about similar jobs
Get an email when we spot other openings like this one – same job function, comparable seniority, roles you'd actually want to see.
How we calculate "similar"
No black box, no LLM guesswork: a deterministic score built from four normalized attributes. Here's this role's own peer group at different match levels, so you can see the mechanism, not just the result.
Every comparison starts from the same 100-point budget: 25 for working in the same function, 40 for the same therapeutic area, 20 for the same or adjacent seniority, 15 for the same country. A dimension we can't confirm on both sides contributes nothing, never a guess, never a free pass.
0 points, never a partial guess. A role we know almost nothing about beyond its function bottoms out at 25%; it never inflates to 100% just because there's little to compare against. Seniority uses a defined ladder (Associate → Manager → Associate Director → Senior → Principal → Director → Senior Director → Executive/VP) so "Director" and "Senior Director" count as adjacent, but "Director" and "Executive/VP" do not.