Senior Platform Security Engineer (100% Remote within Spain)

Docplanner is a global health‑tech company that helps patients find and review doctors while providing providers with tools to manage bookings and improve patient care.

With a presence in 13 countries and 90 million patients every month, we empower patients and streamline the healthcare experience.

Job Description

The Internal Platform is a pivotal foundation that accelerates product development by providing a reliable, scalable, and self‑service ecosystem.

It supports the entire software lifecycle and is meticulously tailored to meet the organization’s technological needs and strategic direction.

The platform enables development teams to operate autonomously in 80 % of cases, reducing dependency on the Internal Platform team and ensuring compliance, security, and business continuity across the system.

Overall, a platform engineering team plays a critical role in ensuring a company’s technology infrastructure is reliable and scalable.

The Internal Platform team consists of 34 people including 27 individual contributors, 2 Staff Engineers, 4 Engineering Managers, and the Head of Internal Platform.

• Challenges
• Platform Security is the first point of contact for the Global Security Team, responsible for protecting the underlying infrastructure from vulnerabilities, threats, and attacks.
• Developing and maintaining tools for Global Security to deliver vulnerability management platforms for application triaging and continuous compliance.
• Integrating the diverse technology stacks used by multiple teams across the complex Docplanner organization.
• Ensuring scalability and reliability as the organization grows, designing systems capable of handling high traffic.
• Stakeholders
• Global Security – collaborate on compliance, risk management, and act as a technical point of contact during escalated incidents such as DDo S or abuse cases.
• PMS (Practice Management Systems) teams – audit existing systems, support secure migration to the central platform, and interpret global security and legal requirements for PMS implementations.
• Core Team within Internal Platform – consult on technical compliance, networking standards, and resolve misconfigurations or vulnerabilities across platform components.
• Experience Teams – provide guidance on infrastructure‑related application security topics, encryption practices, and secure CSP integrations.
• Legal – ensure alignment with data protection regulations, encryption standards, and locality requirements.
• Impact
• Ensure compliance with industry best practices and standards such as ISO27001, C5, and SOC2.
• Introduce security into every step of the platform lifecycle.
• Proactively mitigate threats before they arise.
• Optimize system scalability and cost efficiency.
• Develop, monitor, and maintain Kubernetes clusters on multiple continents.
• Develop and maintain CI/CD pipelines.
• Design deployments for high availability.
• Fix urgent issues and optimize performance.
• Support team members in daily tasks.

Qualifications

• At least 5 years of experience related to security.
• Vast experience with container orchestration platforms like Kubernetes and how to secure them (must‑have).
• Experience developing policies for security‑focused CNI/Service Mesh (e. g., Calico, Cilium).
• Experience scanning for and managing vulnerabilities at scale.
• Experience with Hashi Corp Vault.
• Proficiency with Terraform and popular CI/CD tools.
• Experience building scalable and secure production HA environments using AWS.
• Knowledge of network security services such as AWS WAF/Cloudflare.
• Comfort with developing automation tools or scripts in Bash or Go.
• Proficiency in English (spoken and written, minimum B2).
• Ability to influence others about security best practices.

Compensation

• Salaries are commensurate with experience and skills.
• Flexible remuneration and benefits system via Flexoh, which includes a restaurant card, transportation card, kindergarten, and training tax savings.
• Work‑Life Balance
• Remote or hybrid work model with a hub in Barcelona.
• Fully flexible working hours; attendance at a few weekly meetings only.
• Summer intensive schedule during July and August (work 7 hours, finish earlier).
• 23 paid holidays, with exchangeable local bank holidays.
• Additional paid holiday on your birthday or work anniversary.

Benefits

• Private health‑care plan with Adeslas for you and subsidies for your family (medical and dental).
• Access to hundreds of gyms for a symbolic fee in partnership with Andjoy for you and your family.
• Access to i Feel, a mental‑wellness platform offering online psychological support and counseling.
• Professional Development
• Free English and Spanish classes.
• Equal Opportunity Statement

We promote and embrace equal opportunities in our hiring process and at work.

You receive equal treatment regardless of age, disabilities, gender reassignment, marital or civil partner status, pregnancy or parental status, race, colour, nationality, ethnic or national origin, religion or belief, sex, sexual orientation or any other dimension of human difference.

If you require additional support in the recruitment process, please let us know.

We have adapted interviews in the past to accommodate candidates, and we remain committed to equity and inclusion.

“We believe all humans, in all their beautiful diversity, should have equal rights, dignity and respect. Period.” – Mariusz Gralewski, CEO

#J-18808-Ljbffr