Platform Security Engineer

The posting, as BusPatrol wrote it

JOB OVERVIEW

BusPatrol is transforming student transportation safety through AI-enabled, cloud-connected platforms and real-time operational systems. We are seeking a Sr Platform Security Engineer to make those platforms secure by default, resilient, and easier for engineering teams to operate safely.

This is a hands-on engineering role focused on securing the platform layer: AWS identity and access, multi-account guardrails, network security, secrets and encryption, infrastructure-as-code, CI/CD security controls, vulnerability management, and security telemetry. You will partner with DevOps, application engineering, architecture, MLOps, IT, and Cyber Security to turn security requirements into reusable controls and paved-road patterns.

The successful candidate will bring strong judgment, practical implementation skills, and the ability to improve security without creating unnecessary delivery friction. This role is not an application security specialist or a general SRE role; its primary mandate is platform and cloud security engineering.

This role will be hybrid in Austin, TX.

KEY RESPONSIBILITIES

• Design, implement, and continuously improve security controls across BusPatrol’s AWS multi-account environments.
• Establish least-privilege identity patterns using AWS IAM, IAM Identity Center, Entra ID, permission sets, groups, cross-account roles, service roles, and time-bound elevated access where appropriate.
• Build and maintain secure, reusable Terraform modules and AWS CDK constructs for platform services, security controls, logging, encryption, networking, and account/environment guardrails.
• Help evolve AWS Organizations, Control Tower, service control policies, account boundaries, and shared-services patterns to reduce blast radius and improve governance.
• Secure cloud networking through practical controls for VPCs, routing, security groups, network ACLs, WAF, private connectivity, site-to-site VPNs, Direct Connect, and related network segmentation strategies.
• Implement and operate secrets-management and encryption patterns using AWS KMS, Secrets Manager, Parameter Store, TLS, and automated credential rotation.
• Integrate security checks into GitHub Actions and other delivery workflows, including infrastructure validation, dependency and vulnerability scanning, container/image security, SBOMs, signing, and policy enforcement.
• Develop policy-as-code and preventive guardrails using appropriate tools such as AWS Config, SCPs, CloudFormation Guard, OPA, Conftest, Checkov, tfsec, or equivalent technologies.
• Partner with engineering teams to define secure golden paths, platform templates, and documented patterns that make the safest implementation the easiest implementation.
• Operate and improve cloud security telemetry and findings across services such as GuardDuty, Security Hub, CloudTrail, AWS Config, CloudWatch, and Datadog.
• Triage, prioritize, and remediate platform security findings from

[…]
CSP, or relevant equivalent certification.

CORE SKILLS

• AWS platform and cloud security
• IAM, identity governance, and privileged access
• Infrastructure as Code security
• Cloud networking and segmentation
• CI/CD and software supply-chain security
• Secrets management and encryption
• Policy-as-code and security guardrails
• Vulnerability and findings management
• Security automation and observability
• Incident response and root-cause analysis
• Technical documentation and enablement
• Cross-functional engineering leadership

WHY BUSPATROL?

WHO WE ARE

BusPatrol is a technology company with a public safety mission. Our AI, machine learning, telematics, and cloud-connected systems help communities make the journey to and from school safer for students.

WHAT WE OFFER

• Competitive salary and benefits package
• Unlimited PTO
• A purpose-driven career focused on protecting children and improving public safety
• The opportunity to work with modern cloud, automation, AI, and security technologies
• A culture of safety, learning, teamwork, and meaningful technical impact

BE PART OF SOMETHING BIGGER

This is an opportunity to build security capabilities for a mission-critical platform, work directly across cloud infrastructure and engineering, and establish durable controls that enable teams to move faster with confidence. You will join a pragmatic, collaborative culture that values safety, connection, excellence, impact, ownership, and continuous learning.

COMPENSATION NOTE

The US salary range for this position will be provided in the posting. Salary ranges are determined by role, level, location, and additional factors including job-related skills, experience, and relevant education or training. Compensation details in US postings reflect base salary only and do not include bonus, commission, or benefits where applicable.

EQUAL OPPORTUNITY

BusPatrol is an equal opportunity employer. EOE/AA Disability-Veteran.