Senior Platform Security Specialist

Senior Platform Security Engineer / Platform Security Officer - 100% remote (EST)

Optomi, in partnership with a global client in the retail space, is seeking a senior-level Platform Security professional to support a large-scale, multi-year cybersecurity transformation initiative. This role sits at the intersection of application security, IAM, platform hardening, and risk validation and requires deep understanding of how security controls operate in complex, legacy-heavy enterprise environments.

This is a hands-on, execution-oriented role for someone who can translate cybersecurity strategy into practical, validated security outcomes across diverse business units and technology stacks.

• Partner with engineering, architecture, and business teams to implement and validate platform and application security controls across modern and legacy environments.
• Evaluate how IAM, authentication, authorization, and segmentation interact with applications, including older systems with technical constraints.
• Support platform hardening initiatives, including remediation planning for outdated servers, applications, and infrastructure components.
• Conduct security risk assessments to evaluate whether implemented controls meaningfully reduce risk—not just meet policy.
• Review and validate evidence submitted by technical teams to confirm security work has been properly completed.
• Identify control gaps, compensating controls, and mitigation strategies when standard controls cannot be implemented.

• Assess IAM-related risks across platforms and applications, including:
• User and service account access
• Privileged access
• Recommend and support implementation of access controls and mitigations aligned with enterprise security standards.

• Act as a trusted security advisor to technical teams and business stakeholders.
• Help teams produce acceptable security evidence and documentation to support compliance and audit requirements.
• Serve as a flexible, high-impact resource across multiple cybersecurity initiatives as priorities evolve.

• 7+ years of experience in cybersecurity, platform security, application security, or infrastructure security.
• Demonstrated experience securing enterprise platforms that support business-critical applications, including legacy systems.
• Strong understanding of: IAM concepts and implementations;
  Platform hardening;
  Authentication and authorization flows; & Risk-based security decision-making
• Experience conducting or supporting security risk assessments and validating technical remediation.
• Ability to evaluate whether security evidence is technically sufficient and defensible.
• Strong communication skills with the ability to work effectively across engineering, architecture, audit, and business teams.

• Experience working in post-incident or security transformation programs.
• Background in internal audit, risk management, or security assurance (technical focus preferred).
• Familiarity with environments that include legacy applications, on-prem infrastructure, or hybrid architectures.
• Ability to operate independently in ambiguous or evolving security programs.