Senior Cloud Security Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Collaborate with the Infrastructure team to establish and enhance our overall security posture across both legacy and new resources, encompassing data, applications, and networks.

• Act as a subject matter expert on application, data, and network security for our broader engineering teams, working closely with them to ensure the uniform implementation of security policies and best practices.

• Engage in the automation of software deployment to our cloud platform, integrating security into our processes while adopting a DevSecOps approach.

• Enhance our monitoring and alerting systems by incorporating relevant and specific security data points.

• Participate in an on-call rotation and assist in troubleshooting any issues that may arise.

• Define and implement a Security Incident Response process/policy that evolves regularly, with ongoing testing and compliance.

⛳️ Requirements

• A minimum of three years of experience in Cloud Infrastructure roles, primarily in AWS, with teams practicing DevSecOps.

• Comfortable interacting with AWS through CLI and/or API.

• Proficient in managing Infrastructure solely with Terraform.

• Specialized knowledge in threat assessment, attack surface management, data security, and the network stack at L4 and L7, including DNS, VPC security, IGW, WAF, and CloudFront.

• Experience in designing and managing IAM policies, roles, and trust policies.

• Solid understanding of technologies such as VPN, MFA, SAML, OAuth2, KMS, and TLS.

• Familiarity with various IdP frameworks and integrations (e.g., Okta, OneLogin, Auth0).

• Experience in building and securely running Docker images/containers, including container orchestration security.

• Background in code security audits, static and dynamic analysis, defensive programming techniques, and visualizing and measuring security KPIs.

• Proficiency in at least one scripting or programming language (Python, Bash, Ruby, Node, Golang, Java).

🏝️ Benefits

• A vibrant tech culture.

• Highly competitive compensation packages.

• Comprehensive employment benefits.