---
title: 'Senior Platform Engineer at Mondoo'
canonical: 'https://feeny.ai/job/senior-platform-engineer-mondoo-bulgaria-2c0w3y9yyv80'
type: 'job'
last_seen: '2026-10-15'
---

# Senior Platform Engineer at Mondoo

- **Company:** Mondoo
- **Location:** Bulgaria
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-08-28
- **Last confirmed live:** 2026-10-15
- **Apply:** https://jobs.ashbyhq.com/mondoo/01c2cf0e-51f1-49f9-a97a-9be98c0eddb2

## Job description

Mondoo is creating a new way that helps companies keep their users and data safe from hackers around the world. We believe that a great user experience and visual design will help our users to love and enjoy our product and make it easier to take action against attackers.

## Your impact

You will have a direct impact on the Mondoo Platform including our policy engine, resources, scale, and multi-region functionality. You will be helping teams to assess, scope, prioritize, triage and remediate security findings.

## Key responsibilities

We're seeking a talented Platform Engineer who is eager to enhance their expertise in security. This position offers the opportunity to work with cutting-edge technologies and gain hands-on experience in "policy as code" frameworks while contributing to our dynamic team. In this role, you will:

- Build, manage, and optimize cloud infrastructure using Infrastructure as Code (IaC) tools like Terraform and CloudFormation.
- Automate system configurations using tools like Ansible, Puppet, or Chef.
- Collaborate with teams to ensure seamless integration of infrastructure with CI/CD pipelines.
- Assist in translating high-level security requirements into practical policy as code implementation within cloud and on-premises environments.
- Review vulnerability reports submitted by external users
- Participate in gathering evidence for our audits
- Support the implementation and scaling of automated security controls in Kubernetes, cloud environments (AWS, Azure, GCP), and operating systems.x5
- Stay updated on infrastructure management and automation trends, ensuring a robust and scalable system foundation

Required qualifications

- Strong hands-on experience with IaC tools like Terraform or CloudFormation.
- Proficiency in configuration management tools such as Ansible, Puppet, or Chef.
- Solid understanding of at least one major cloud platform (AWS, Azure, or GCP) and its core services.
- Experience working with container technologies like Docker and orchestration tools like Kubernetes.
- Comfortable scripting in at least one language (e.g., Python, Bash, or similar).
- Knowledge of networking basics (TCP/IP, DNS, etc.).
- Experience with version control systems (e.g., Git).
- Strong problem-solving and analytical skills.
- Willingness to learn and grow into a role focused on security policies and automation.
- Excellent communication skills with the ability to work effectively in a collaborative team environment.
- Able to handle one-off requests while still maintaining the rest of the work

## Preferred qualifications

- Familiarity with security tools and concepts such as policy as code frameworks (Open Policy Agent, Sentinel).
- Knowledge of compliance standards (e.g., CIS, SOC 2, ISO 27001).
- Previous exposure to cloud-native security tools and services.
- Relevant certifications in cloud platforms (e.g., AWS, Azure, GCP).
- A keen interest in learning about security best practices, frameworks, and tools.

Application Process As part of your application, please share links to your GitHub/GitLab repositories or a portfolio of projects that demonstrate your experience with security policy implementation, policy as code, and relevant cloud security tools. We're particularly interested in seeing examples that showcase your ability to translate complex security requirements into executable code for cloud environments. If you're passionate about enhancing cloud security through code, implementing scalable and automated security policies across cloud platforms, participating in collaborative security design processes, and staying at the forefront of cloud security best practices, we'd love to hear from you!

## About Mondoo

## Company Overview

- **One-liner**: Mondoo provides an Agentic Managed Vulnerability Service that pairs an AI-native security platform with expert teams to continuously find, prioritize, and fix vulnerabilities and misconfigurations across an organization’s entire IT infrastructure.
- **Entity Type**: Private (Series A funding stage)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2020
- **Founders**: Soo Choi-Andrews (CEO), Christoph Hartmann (CTO), Dominik Richter (CPO)

## Core Business

- **Primary industry**: Cybersecurity – vulnerability management, exposure management, compliance automation.
- **Target customers**: B2B – Enterprise and SMB, including Fortune 50 companies. Over 300 customers worldwide.
- **Mission or purpose statement**: “Creating a world where vulnerabilities are eliminated—not just managed” and “Building a world where security problems stay fixed.”

## Products & Services

- **Mondoo Platform (Agentic Managed Vulnerability Service)**: A managed service combining AI-native security platform with human experts. It detects, prioritizes, and remediates vulnerabilities across cloud, on-prem, SaaS, endpoints, containers/Kubernetes, and the software development lifecycle. Includes 70+ integrations, patented AI model, and outcomes-driven remediation (not just reporting).
- **cnquery & cnspec (Open Source)**: Core open-source tools for infrastructure querying and security/compliance policy scanning. Used by thousands of organizations worldwide and form the foundation of the commercial platform.
- **Vulnerability & Threat Intelligence**: An indexed database of 783,000+ known vulnerabilities and malicious packages, enriched with context from dark web, media, and government alerts.

## Market Standing

- **Valuation/Market Cap**: Not publicly available.
- **Key Metric**: Total Funding – **$32.5 million** (across Seed and two Series A rounds).
- **Notable Investors/Partners**: Lead investors include **HV Capital** (led $17.5M Series A in October 2025) and **Atomico** (led $15M Series A in October 2021). Angel investors include Bradley Horowitz (Google VP), Marianna Tessel (Red Hat VP/former Puppet co-founder), Andrew Clay Shafer, Dr. Nicole Forsgren (GitHub/Microsoft VP), Tom Killalea (MongoDB Chairman), and Vanessa Peguero (OneLogin CISO).
- **Growth Signals**: 300+ customers (including Fortune 50), 47 employees (LinkedIn) with active hiring, 60% vulnerability reduction for customers, <16 days mean-time-to-remediation, 10x faster than manual approaches, jobs page lists 3 open positions.

## Competitive Advantages

- **Outcomes-centric approach**: Focuses on remediation, not just detection. Guarantees measurable risk reduction.
- **Open source foundation**: Transparent, community-driven development with wide adoption of cnquery/cnspec.
- **Patented AI-native model**: Context-aware data collection across all infrastructure enabling automated, intelligent decision-making.
- **Expert team**: Founders and engineers from Google, Chef Software, AWS, Orca, Qualys, Tenable, NASA, and Deutsche Telekom.
- **Unified platform**: Single view across cloud, on-prem, SaaS, endpoints, CI/CD, and containers.

## Strategic Focus

- **Agentic vulnerability management**: Driving full remediation loops through AI agents that autonomously find, prioritize, and fix vulnerabilities.
- **Managed service model**: Scaling the combination of expert human teams and AI to reduce customer backlog without requiring them to hire more staff.
- **Continuous compliance**: Automating evidence collection for SOC 2, ISO 27001, CIS, PCI DSS, HIPAA, GDPR, NIS2, DISA STIGs, and custom policies.
- **Integrations & ecosystem**: Deepening 70+ integrations with existing tools (cloud providers, ticketing, CI/CD, SIEM, EDR).

## Why Work Here

- **Remote-first culture** with team offsites and regular in-person gatherings.
- **Flexible PTO** and country-specific well-being benefits.
- **Learning budget** (annual allowance for courses and conferences).
- **Home office setup stipend** for an ideal workspace.
- **Equity** (stock options) and competitive salary.
- **Open source & innovation**: Work on transparent, community-driven security tools; push boundaries with AI and automation.
- **Security-first mindset**: Build products that make security accessible and effective.
- **Health benefits** and a “take care of the team” philosophy.

## Sources

1. [mondoo.com/careers](https://mondoo.com/careers)
2. [mondoo.com/about](https://mondoo.com/about)
3. [mondoo.com](https://mondoo.com/)
4. [linkedin.com/company/mondoo](https://www.linkedin.com/company/mondoo)
5. [jobs.ashbyhq.com/mondoo](https://jobs.ashbyhq.com/mondoo)

## Other roles at Mondoo

- [Senior Platform Engineer](https://feeny.ai/job/senior-platform-engineer-mondoo-germany-cb4rjv6bdxn7) — Germany
- [Senior Go Engineer](https://feeny.ai/job/senior-go-engineer-mondoo-bulgaria-z1ygr0tmdqdt) — Bulgaria
- [Senior Product Designer](https://feeny.ai/job/senior-product-designer-mondoo-united-states-9y6ym6mam76e) — United States
- [Senior Platform Engineer](https://feeny.ai/job/senior-platform-engineer-defense-unicorns-colorado-hawaii-xba5q1cdp31y) — Colorado / Hawaii
- [Senior Platform Engineer](https://feeny.ai/job/senior-platform-engineer-growthloop-remote-883g5q0tjced)
- [Senior Platform Engineer](https://feeny.ai/job/senior-platform-engineer-ebury-madrid-mpjm681e5fpy) — Madrid, Spain
- [Senior Platform Engineer](https://feeny.ai/job/senior-platform-engineer-skip-loans-sydney-2k3y2pvtgnre) — Sydney, Australia
- [Senior Platform Engineer](https://feeny.ai/job/senior-platform-engineer-backbase-hyderabad-f68sytt076b4) — Hyderabad, India
- [Senior Platform Engineer](https://feeny.ai/job/senior-platform-engineer-backbase-hyderabad-f7zdqjjvy3zf) — Hyderabad, India
- [Senior Platform Engineer](https://feeny.ai/job/senior-platform-engineer-sauna-san-francisco-pqfk6v0xnzv0) — San Francisco, CA