← All roles

Engineering

Senior Security & Platform Engineer

Secure the decision layer for engineering in manufacturing.

We are building a new category

Every product a manufacturer ships is the result of thousands of engineering decisions about architecture, physics, components and trade-offs. Today those decisions are scattered across documents, spreadsheets and people’s heads. The software around them only stores the outcome.

SourcePilot is the decision layer for engineering in manufacturing companies. It is where customer intent becomes architecture, physics becomes sized components, and every decision traces back to the requirements. From that layer, specifications flow downstream to CAD, simulation and procurement, and they stay live as products change. Most tools organise engineering data. SourcePilot does the engineering, delivering requirements, variants, change requests and optimisations as finished work.

Why this role matters

Being a manufacturer’s decision layer means holding its most valuable intellectual property: how its products are engineered. The companies we work with have no tolerance for weak security or unreliable infrastructure, and they shouldn’t. You will build the platform that earns that trust and set a standard of security, reliability and performance that others in the category will be measured against.

What you will own

Security and compliance

  • Own our information-security and compliance programme against frameworks such as SOC 2 and ISO/IEC 27001, along with the security assessments required by major cloud and software ecosystems.
  • Set the bar for application and infrastructure security: identity and access, tenant isolation, encryption, secrets, vulnerability management and secure development.
  • Represent SourcePilot in customer security reviews and audits, and win them. Keep GDPR, NIS2 and EU AI Act obligations in view.

Deployment and infrastructure

  • Shape our cloud and edge architecture, including data residency and region control for customers with strict data-location requirements.
  • Deliver the deployment models enterprise manufacturers require, with infrastructure-as-code, CI/CD, backup and disaster recovery.

Logging, observability and evals

  • Build first-class logging, monitoring, tracing and audit trails.
  • Create rigorous evaluation of our AI and engineering pipelines, so that every release is provably correct, reliable and efficient.

Performance

  • Make complex engineering models run fast at industrial scale, profiling and optimising across the whole platform.

Who we are looking for

We hire very few people, and only the most ambitious and talented. You want to define how a category is built, not maintain someone else’s system. You hold yourself to a higher standard than anyone else would. You move fast without cutting corners, and you take full ownership of outcomes. If you want a comfortable role, this isn’t it. If you want your work to underpin how industrial products get engineered, it is.

We operate as an AI-native company. Our engineers work with fleets of agents, build the loops that make them better, and expect their own output to grow every quarter. If you don’t yet work this way, this isn’t the role.

Must have

  • Senior experience in platform, infrastructure, DevSecOps or backend engineering for production SaaS
  • Deep hands-on experience with at least one major cloud provider and infrastructure-as-code
  • Solid security engineering fundamentals
  • You know how to run agentic development safely, with guardrails, sandboxing, permissions, auditability and evals for AI-generated code and AI actions in production
  • Can hold your own with a customer’s CISO

Strong plus

  • Has led a company through SOC 2 and/or ISO 27001 certification
  • CISSP, CCSP, OSCP or cloud security certifications from a major provider
  • You have run single-tenant, private-cloud or customer-hosted deployments for regulated or industrial customers
  • Hands-on work securing LLM and agent systems, such as prompt injection, data leakage, model access control and the OWASP Top 10 for LLMs
  • German or French language skills

What you get

  • Ownership of foundations that a new category will be built on.
  • The hardest problems at the point where AI, physics and industrial engineering meet.
  • A small, exceptional team with direct access to the founders.
  • Competitive salary and participation in the company’s equity scheme.

How to apply

Send your CV or LinkedIn profile to hello@sourcepilot.ai, with a few lines about a time you took a hard, messy customer problem all the way to a working solution.