The posting
Job Description:
Overview:
We don’t simply hire employees. We invest in them. When you work at Chatham, we empower you — offering professional development opportunities to help you grow in your career, no matter if you've been here for five months or 15 years. Chatham has worked hard to create a distinct work environment that values people, teamwork, integrity, and client service. You will have immediate opportunities to partner with talented subject matter experts, work on complex projects, and contribute to the value Chatham delivers every day.
We are seeking a Platform Security Engineer to evolve our security platform function within a growing financial risk and advisory SaaS business. This role is ideal for an engineer who thrives in a hands-on environment and is motivated to build, scale, and mature security capabilities in a cloud-native platform.
You will join a small but growing team, designing and implementing security controls across cloud infrastructure, applications, and CI/CD pipelines. You will play a critical role in strengthening our security posture, ensuring compliance with SOC 2 requirements, and enabling engineering teams to build securely at scale.
What You’ll Do
- Design, build, and implement security controls across Azure-based cloud infrastructure, containerized environments, and .NET applications, all at the platform level for broad coverage
- Ship security-focused capabilities and features that are highly leveraged across the development platform
- Implement and mature cloud security and application security practices, including secure architecture patterns
- Collaborate cross-functionally with Engineering, Compliance, and Information Security to embed security into the software development lifecycle (SDLC) by integrating security into CI/CD pipelines and developer workflows
- Implement cloud security scanning and posture management, to prevent misconfigurations, vulnerabilities, and drift across Azure environments
- Identify and address emerging risks related to AI/LLM usage across the SDLC
- Evaluate, implement, and operate Platform tooling, with a focus on automation and scalability
- Utilize AI to assist with all aspects of the engineering work: learning, investigations and debugging, creation and review of code
- Document Platform standards for secure coding
What Success Looks Like (First 12 Months)
- Reduced the burden of implementing secure coding for all Engineering teams
- Collaborated effectively with adjacent teams such as Information Security, Engineering, Governance/Risk/Compliance and IT
- Prioritized effectively operational work alongside project development
- Implemented effective security controls via code within CI/CD pipelines and development workflows
- Strengthened and matured cloud and application security practices across the organization
- Maintained and improved robust policy scanning and vulnerability management practices
- Automated and maintained audit control evidence to meet SOC 2 requirements
What You Bring
- 3+ years of experience in security engineering, with a strong foundation in software or cloud engineering
- Experience building applications within the full Software Development Life Cycle (initial coding through production deployment and operations)
- Experience integrating security into CI/CD pipelines and developer tooling
- Hands-on expertise in cloud security (Azure required; AWS familiarity preferred)
- Experience securing modern application stacks, including .NET applications and containerized environments
- Strong understanding of application security principles, including secure coding practices, threat modeling, and common vulnerabilities (OWASP Top 10)
- Strong problem-solving skills with the ability to operate tactically
- Experience with security tooling such as SAST, DAST, container scanning, and cloud security posture management (CSPM)
- Excellent collaboration and communication skills, particularly in working with engineering teams and Information Security
About Chatham Financial:
Chatham Financial is the leading independent capital markets advisor, delivering an integrated blend of expert advice and powerful technology to help you reduce risk and seize opportunity. With decades of capital markets strategy, execution, monitoring, and performance expertise, we serve as an unwavering advocate for your best interests and your innovation partner. Our technology platform unifies data across assets, debt, and derivatives, giving you unmatched agility, transparency, and insight.
It’s clear ahead.
Our commitment is to carry that light forward in every partnership, every solution, and every market we serve.
We help guide the way—giving clients the insight and momentum to move forward with confidence, no matter what lies ahead.
