Senior Cloud Security Engineer
On-siteLondon, England, United Kingdom
Job Summary
Design and automate security controls for cloud infrastructure across AWS and GCP, maintaining and scaling tooling like cloud security posture management and vulnerability platforms. Investigate and remediate security vulnerabilities, design access controls applying zero-trust principles, and partner with incident response teams to build detections and mitigate security incidents. Develop security standards and guardrails for engineering teams, embedding them into CI/CD and GitOps workflows while collaborating with compliance teams to translate ISO 27001, SOC 2, and GDPR requirements into technical controls. Conduct architecture reviews, threat modeling, and code reviews to identify risks, leading security projects independently from scoping to measurable outcomes.
Required Qualifications
- 5+ years of experience in cloud security, or in security-focused infrastructure/DevOps engineering
- Hands-on experience securing containerized environments and Kubernetes
- Strong understanding of AWS (ideally GCP as well) and infrastructure-as-code solutions
- Proficiency in one or more programming or scripting languages (e.g., Python) for automation
- Experience working with cloud security posture management or similar security tooling
- A self-starter and problem solver who can own problems end to end, drive projects with minimal direction, and communicate clearly across teams
Desired Qualifications
- Experience across multiple clouds (AWS and GCP)
- Experience integrating security into CI/CD pipelines and DevOps/GitOps workflows
- Hands-on experience with threat modeling and security architecture reviews
- Hands-on experience working with compliance requirements and turning them into technical controls
- Contributions to security communities, open-source projects, or security research
- Relevant security certifications (e.g., CKS)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.