Platform Security Engineer

Internset is looking for a Platform Security Engineer to strengthen the security, reliability, and resilience of our web platform and desktop applications. A key part of this role will involve securing Internset Tracker, our desktop application available for both macOS and Windows. The application supports work activity tracking and verification, making endpoint security, secure data transmission, privacy, application integrity, and platform-specific security especially important.

Key responsibilities • Review the security of Internset’s web platform, APIs, cloud infrastructure, and desktop applications • Assess and strengthen the security of Internset Tracker across macOS and Windows • Identify vulnerabilities and coordinate their timely remediation • Secure authentication, authorization, application updates, local data storage, and API communication • Review desktop application permissions, code-signing processes, certificates, and release configurations • Protect sensitive activity, device, screenshot, and user-related data throughout its lifecycle • Implement security controls across development, staging, and production environments • Improve CI/CD security, dependency scanning, secrets management, and software supply-chain security • Monitor security events, investigate suspicious activity, and support incident response • Conduct application, API, infrastructure, and endpoint security assessments • Work closely with developers to embed security throughout the software development lifecycle • Support security documentation, risk assessments, compliance requirements, and audits

What we’re looking for • Strong understanding of application, API, cloud, endpoint, and platform security • Experience securing desktop applications for Windows, macOS, or both • Knowledge of secure software distribution, application signing, certificates, permissions, and update mechanisms • Experience with AWS or similar cloud platforms • Strong understanding of OWASP Top 10, secure coding practices, and common attack techniques • Familiarity with IAM, encryption, firewalls, logging, monitoring, and secrets management • Experience with vulnerability scanning, penetration testing, or security testing tools • Understanding of Linux, Git, containers, and CI/CD pipelines • Ability to investigate security issues and recommend practical remediation measures • Strong communication skills and the ability to collaborate effectively with engineering teams

Qualifications • Experience securing Electron, .NET, Swift, Node.js, Next.js, Go, or similar application stacks • Knowledge of Windows and macOS application security architecture • Familiarity with Microsoft Store and Apple application distribution requirements • Experience with Docker, Kubernetes, infrastructure as code, and DevSecOps practices • Experience with SIEM, WAF, SAST, DAST, SCA, or cloud security posture management tools • Familiarity with SOC 2, ISO 27001, GDPR, or other security and privacy frameworks • Relevant certifications such as Security+, CEH, OSCP, CISSP, or cloud security certifications

Why join Internset? Internset is building technology that enables companies to deliver virtual training, evaluate practical skills, and identify workforce-ready talent. You will help secure both our broader platform and Internset Tracker, which is used across macOS and Windows to support work verification and activity tracking. This is an opportunity to influence the security architecture of a growing product ecosystem and work directly with a team developing AI-enabled technology for talent and skill development. Candidates who enjoy taking ownership, solving complex security challenges, and building secure systems from the ground up are encouraged to apply.