Senior Cloud Security Engineer – AI Resilience, Security Enhancements

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Evaluate the existing cloud security framework across Form3 environments, pinpointing risks, control deficiencies, and opportunities for enhancement.

• Create and implement scalable cloud security measures to bolster the resilience and security of the cloud platform.

• Upgrade perimeter security measures across the cloud infrastructure.

• Fortify CI/CD pipeline security through secure build methodologies, automated security assessments, deployment governance, and artifact integrity.

• Enhance production access security, focusing on RBAC, least-privilege application, deployment tools, and operational procedures.

• Strengthen software supply chain security via dependency management, container image scanning, provenance, signing, and vulnerability remediation.

• Support the secure adoption and governance of AI-enabled engineering capabilities, including data protection, auditability, and operational resilience controls.

• Offer technical leadership and direction on cloud security architecture and secure engineering practices.

• Generate technical documentation, encompassing solution designs, implementation strategies, operational procedures, and security evidence.

• Collaborate with engineering, platform, and security teams to deliver sustainable, production-ready security enhancements.

• Ensure deliverables are in line with operational resilience requirements, regulatory standards, and internal security protocols.

• Implement changes employing structured, low-risk change management techniques while ensuring service availability.

⛳️ Requirements

• Significant experience in designing and deploying cloud security solutions within extensive cloud-native environments.

• Strong practical experience in securing public cloud platforms (AWS is preferred).

• Proficiency in cloud security architecture, identity and access management, workload protection, and infrastructure security.

• Experience in securing CI/CD pipelines and contemporary software delivery methodologies.

• In-depth knowledge of software supply chain security, including dependency management, artifact signing, provenance, and vulnerability management.

• Practical experience in implementing least-privilege access models and RBAC.

• Familiarity with security monitoring, risk assessment, and security governance.

• Background in highly regulated or mission-critical production environments.

• Exceptional stakeholder management and communication abilities, with a capacity to influence engineering teams.

• Strong skills in technical documentation and design.

• Desirable: experience in implementing security controls for AI or machine learning platforms.

• Desirable: knowledge of cryptographic controls and key management.

• Desirable: experience with Infrastructure as Code and policy-as-code tools.

• Desirable: familiarity with payment platforms or financial services environments.

• Desirable: comprehension of operational resilience frameworks and regulatory requirements impacting critical financial infrastructure.

• Desirable: relevant cloud or security certifications (AWS Security Specialty, CISSP, CCSP, or similar).

• Hiring location limited to the UK.

🏝️ Benefits

• 12-month fixed-term contract.

• Remote work available after picking up equipment from the office on the first day.

• An inclusive employer dedicated to diversity, open-mindedness, and curiosity.

• Commitment to equal opportunity and anti-discrimination.

• Guaranteed interview for neurodiverse and physically disabled applicants who meet minimum criteria.

• Reasonable accommodations during recruitment, including accessible job postings and interview adjustments.