Key skills
Security EngineeringApplication SecurityCloud SecurityPlatform SecuritySoftware Delivery EnvironmentsSource ControlCI/CDDependency ManagementCloud Deployment PracticesSecurity ScanningCode ScanningDependency ScanningSecret ScanningInfrastructure ScanningAWS SecurityAzure SecurityGitHub Advanced SecurityCodeQLDatabricks SecurityEntra IDNIST FrameworkSOC 2 FrameworkISO 27001 FrameworkAudit SupportSecurity DocumentationAIAgenticDatabricksAWSAzureGitHubCommunicationCollaborationSales
About this role
Beghou Consulting has been a trusted advisor to life sciences firms for over 30 years, focusing on optimizing sales, marketing, and operations. The Platform Security Engineer will strengthen and scale security practices across technology platforms, particularly in AI-assisted software delivery and cloud infrastructure.
Responsibilities:
- Improve and extend security patterns across Beghou technology platforms, with focus on Arc and Arc Data Excellence
- Build on existing controls such as GitHub Advanced Security to improve automation, transparency, and coverage across engineering workflows
- Support secure software delivery practices across code, pull requests, secrets, dependencies, infrastructure-as-code, and CI/CD
- Help define practical guardrails for AI-assisted and agentic coding, including secure usage patterns and review expectations
- Support tighter scanning baselines and continuous assessment across AWS, Azure, Databricks, Entra ID, and related platform infrastructure
- Partner on architecture and design reviews for new platform capabilities and high-impact changes
- Collaborate with IT and governance teams on endpoint, identity, compliance, and audit-related security practices
- Help develop security documentation, implementation guidance, training materials, and reporting metrics
Requirements:
- 6+ years of experience in security engineering, application security, cloud security, platform security, or a related area
- Experience with modern software delivery environments, including source control, CI/CD, dependency management, and cloud deployment practices
- Experience with security scanning and related controls such as code scanning, dependency scanning, secret scanning, or infrastructure scanning
- Working knowledge of AWS and Azure security concepts
- Strong collaboration and communication skills across technical and non-technical stakeholders
- Experience with GitHub Advanced Security, CodeQL, or similar tooling
- Experience with Databricks or data platform security
- Experience with Entra ID, Azure security services, or AWS security tooling
- Familiarity with NIST, SOC 2, ISO 27001, or related frameworks
- Experience supporting audits, remediation tracking, or security documentation