Platform Security Engineer, NZ

Partly Limited

Job Overview

Location

Christchurch

Job Type

Full-time

Full Job Description

📋 Description

• Own Partly’s security posture and ensure platform reliability by working directly with the SRE team, including participation in on-call rotations for security and availability incidents.
• Lead security incident response planning, testing, and post-incident reviews for security-related events, while contributing to availability incident investigations.
• Build and maintain security event monitoring and alerting systems to proactively detect and respond to threats across the infrastructure.
• Prepare for and pass security audits including ISO 27001 and future SOC 2 compliance, ensuring controls are implemented and operational, not just documented, using Vanta for continuous compliance management.
• Respond to enterprise customer security questionnaires and maintain an up-to-date risk register, communicating security risks clearly to engineering and leadership teams.
• Harden infrastructure by enforcing the principle of least privilege across the stack, including PostgreSQL role assignments, Kubernetes RBAC refinement, and secret access controls.
• Drive network segmentation and zero-trust adoption using Cilium network policies and Kyverno admission policies, making production access read-only by default for developers.
• Implement and operate a vulnerability scanning pipeline using Trivy, Renovate, and Falco, owning the triage process for severity assessment, prioritization, tracking, and remediation coordination with service owners.
• Report on vulnerability metrics and trends to engineering leadership, ensuring transparency and accountability in remediation efforts.
• Work with infrastructure-as-code practices using Terraform, ArgoCD, and GitOps workflows, ensuring all infrastructure changes undergo code review and are version-controlled.
• Collaborate with engineering teams to secure cloud infrastructure on GCP, applying cloud security best practices to production environments.
• Serve as the first dedicated security hire at Partly, building security processes from scratch while partnering closely with platform and SRE teams.
• Translate technical security vulnerabilities into business risk for non-technical stakeholders, enabling informed decision-making across the organization.
• Contribute to container and supply chain security initiatives, including SBOM management and image signing where applicable.
• Maintain a hands-on technical role focused on implementation, not just policy documentation, with direct involvement in securing Kubernetes, cloud networks, and application layers.
• Support the company’s global team structure by being based in Christchurch or Auckland, with quarterly in-person team gatherings (Season Openers) fully funded by Partly.
• Engage with a culture that values high trust, flexibility, and collaboration, with daily office presence expected in Christchurch or Auckland, while maintaining autonomy over personal scheduling.

🎯 Requirements

• 5+ years in security engineering, platform engineering, or SRE with strong security focus
• Hands-on Kubernetes security experience including RBAC, network policies, and admission controllers
• Experience with ISO 27001, SOC 2, or PCI-DSS compliance frameworks
• Cloud security expertise with strong preference for GCP experience
• Proficiency with infrastructure-as-code tools such as Terraform and ArgoCD
• Clear communication skills to translate technical risks to non-technical stakeholders

🏖️ Benefits

• Healthy, catered lunches every workday with snacks and drinks available
• $1,500 annual wellness allowance for gym memberships, physio, GP visits, and other health-related expenses
• 3 months fully paid parental leave for primary caregivers with flexible return-to-work options
• Paid 24/7 car park or commute allowance for office or co-working space attendance
• Brand-new, architecturally designed offices with social spaces, coffee, and nearby cafes
• Quarterly Season Openers with all travel and accommodation covered

Skills & Technologies

Rust

PostgreSQL

GCP

Kubernetes

Onsite

Ready to Apply?

Apply Externally

You will be redirected to an external site to apply.

AI Job Fit Analysis

Pro

See exactly how your profile matches this role — strengths, skill gaps, and what to do about them.

Partly Limited

Visit Website

About Partly Limited

Partly Limited operates a global marketplace and data platform that catalogs millions of auto parts from salvage yards, dismantlers and recyclers. It provides APIs and software tools that enable insurers, repairers and parts suppliers to identify, price and source OEM, aftermarket and recycled components in real time. Founded in 2020 in Christchurch, New Zealand, the company aggregates inventory from yards across North America, Europe and Oceania, applying machine-learning models to cross-reference parts numbers, fitment data and pricing for the collision and mechanical repair ecosystem.

View Company Profile

Get more remote jobs like this

Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.

Weekly remote jobs and featured talent.

No spam. Only curated remote roles and product updates. You can unsubscribe anytime.