Senior Platform Engineer - Security

About this role

<div class="content-intro"><p class="p1"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Rumble </strong>is <em>the</em> Freedom-First technology platform. We proudly offer a video platform, cloud services, advertising solutions, and a non-custodial cryptocurrency wallet.</span></p></div><p><span data-contrast="none">Rumble Cloud is seeking a Senior Platform Engineer (Security) to help operate, secure, and continuously harden the infrastructure that powers our public cloud, built on OpenStack and Ceph. This role sits at the intersection of platform engineering and security operations: you’ll apply and maintain security hardening across our Linux fleet and cloud control plane, track vulnerabilities through to remediation, and serve as a key engineering partner for internal and external audits.</span></p> <p><span data-contrast="none">Strong Linux fundamentals are essential, and demonstrated security expertise, ideally backed by certification, is a significant differentiator. You’ll work across operating systems, OpenStack and Ceph components, and Kubernetes, using automation to keep baselines consistent and auditable. You’ll partner closely with cloud engineering, DevSecOps, and compliance stakeholders to ensure the platform meets both reliability and security expectations as it grows.</span></p> <p><span data-contrast="none">If you enjoy hardening Linux at scale, working directly with vulnerability and control frameworks such as CIS Benchmarks and ISO 27001, and contributing to the security posture of mission-critical cloud infrastructure, this role offers substantial impact and technical depth.</span></p> <h2 id="responsibilities" class="font-editorial font-bold mb-2 mt-4 [.has-inline-images_&]:clear-end text-base first:mt-0">Responsibilities</h2> <ul> <li><span data-contrast="none">Assess, implement, and maintain security hardening (CIS Benchmarks, STIGs, or equivalent) across Linux hosts, hypervisors, and the cloud control plane, using automated baselines with tools such as Ansible and Terraform.</span></li> </ul> <ul> <li><span data-contrast="none">Track and remediate vulnerabilities at the infrastructure layer, including operating systems and platform components such as OpenStack, Ceph, and Kubernetes, maintaining accurate inventory, patch SLAs, and risk-based prioritization.</span></li> </ul> <ul> <li><span data-contrast="none">Coordinate with the DevSecOps Engineer on application- and pipeline-layer remediation, ensuring alignment between platform hardening and SSDLC practices.</span></li> </ul> <ul> <li><span data-contrast="none">Serve as a primary technical contributor to internal and external audits, including evidence collection, control narratives, and responses to auditor questions, mapping work to ISO 27001 and other relevant frameworks.</span></li> </ul> <ul> <li><span data-contrast="none">Operate and improve core platform services on Linux infrastructure, contributing to automation, capacity planning, incident response, and reliability engineering.</span></li> </ul> <ul> <li><span data-contrast="none">Help design logging, monitoring, and alerting that support both operational and security use cases, in collaboration with platform, security, and SRE teams.</span></li> </ul> <ul> <li><span data-contrast="none">Document hardening baselines, security controls, and operational procedures clearly so that they are repeatable, testable, and auditable.</span></li> </ul> <h2 id="qualifications" class="font-editorial font-bold mb-2 mt-4 [.has-inline-images_&]:clear-end text-base first:mt-0">Qualifications</h2> <ul> <li><span data-contrast="none">Strong Linux systems engineering background (systemd, networking, storage, package management) on major Linux distributions.</span></li> </ul> <ul> <li><span data-contrast="none">Hands-on experience applying security hardening standards such as CIS Benchmarks, STIGs, or equivalent at production scale.</span></li> </ul> <ul> <li><span data-contrast="none">Solid understanding of vulnerability management (CVSS scoring, risk-based prioritization) and Linux security controls (SELinux or AppArmor, auditd, PAM, host firewalling).</span></li> </ul> <ul> <li><span data-contrast="none">Experience with infrastructure automation using Ansible, Terraform, and scripting in Bash and/or Python.</span></li> </ul> <ul> <li><span data-contrast="none">Experience supporting compliance or audit activities, including evidence collection, control documentation, and working directly with auditors or security teams.</span></li> </ul> <ul> <li><span data-contrast="none">Strong understanding of identity and authentication concepts (SSO, OAuth2/OIDC, privileged access) and excellent documentation skills.</span></li> </ul> <h2 id="preferred-qualifications" class="font-editorial font-bold mb-2 mt-4 [.has-inline-images_&]:clear-end text-base first:mt-0">Preferred Qualifications</h2> <ul> <li><span data-contrast="none">Security certifications such as CISSP, CISM, CCSP, GSEC, GCIH, Security+, or equivalent; more…